$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer File: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer (raw, json) Hash identifier: xk/igZudNHxE4ky+9LBrpif784h21kpyNdqNAVMB8zU= Subject key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 75921FC52D28C3B050702C769ECA1033E8E91607 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 05 Nov 2023 06:33:07 +0000 Certificate not after: Sun 03 Nov 2024 06:38:07 +0000 Subordinate resources: IP: 2a0a:6040:1300::/40 IP: 2a0a:6040:9f00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:92:1f:c5:2d:28:c3:b0:50:70:2c:76:9e:ca:10:33:e8:e9:16:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 06:33:07 2023 GMT Not After : Nov 3 06:38:07 2024 GMT Subject: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:82:b1:26:8b:6e:91:e0:f0:ae:57:72:b5: c7:10:9e:1d:db:b4:63:f5:ff:9a:80:66:3b:e0:71: 26:9d:ed:7f:69:f7:c7:8d:be:f9:8c:97:16:39:75: 39:2e:f1:69:21:01:66:61:66:40:da:19:37:de:04: 18:17:5e:1b:42:d6:07:31:41:61:c9:d6:6e:99:4f: cc:0f:83:2b:45:23:a3:fb:dc:53:14:70:14:d7:d4: 2c:98:23:d9:b4:b6:84:10:90:d0:8a:ab:13:68:2d: 57:ce:c5:1b:bc:16:5c:63:6e:98:43:42:44:58:f7: 0e:ed:4d:30:5c:58:8d:04:cc:22:05:5e:40:cf:90: ed:49:66:ac:cd:cf:da:a7:d5:65:1e:73:b0:a7:12: 24:a6:cf:8c:9f:6b:a1:59:09:d6:64:4c:54:87:1a: 92:74:22:68:8c:5f:31:e6:92:c3:67:1e:1c:c4:51: 5b:d3:a2:e7:a5:3d:12:6d:d4:ad:15:b9:c0:2b:96: 68:b1:52:f7:38:e8:9d:ec:86:d1:f5:63:12:59:5b: 48:58:ed:99:74:45:2b:be:8b:66:d7:0b:4d:b7:a1: be:7c:80:35:02:2f:6a:62:11:95:9a:8b:18:34:4d: df:39:f2:c7:67:41:16:65:7b:2e:76:5f:05:8e:a2: 3e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1300::/40 2a0a:6040:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 39:bf:51:90:41:07:88:c3:e4:d4:e5:e3:20:9f:98:c5:a6:a0: ea:80:c3:f1:7a:5e:c5:4b:45:f9:56:72:9d:60:78:5c:82:6f: 69:f3:6e:e8:2b:3d:5d:1c:e0:55:d8:09:5f:a4:e7:bb:30:d3: 94:ea:9b:33:4f:77:1d:88:e5:20:85:d8:aa:b5:fb:04:64:6f: c0:f4:40:cd:74:a1:44:6e:ac:08:66:dd:a3:35:80:28:47:5b: ba:dc:73:87:90:01:6b:19:b5:e0:c8:ef:8a:13:13:a7:71:72: e9:02:4e:37:3d:2d:d7:ca:4f:25:a6:5e:bf:76:64:d8:71:07: f7:38:b1:bf:95:d5:e4:1e:25:cc:b9:88:1d:a3:01:10:55:2d: b7:e8:4a:d7:f3:0c:a6:b1:6a:30:b3:36:8f:9d:8d:7e:8f:1d: 51:c5:9a:18:6e:e8:a4:35:57:34:ec:03:e5:8c:0f:bd:89:4c: 63:e1:bf:cf:40:42:9e:a1:74:c5:de:ed:12:fd:56:b8:70:d4: 19:ad:03:e6:5c:93:bb:73:88:5b:ea:3d:e3:ee:62:4f:09:5f: a4:43:14:c6:d1:24:0e:86:53:84:3d:93:e9:c7:b8:da:99:ba: 5d:4c:e4:97:e3:a0:53:01:13:65:33:dc:18:89:b7:31:03:09: 67:de:0d:e7 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUdZIfxS0ow7BQcCx2nsoQM+jpFgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNjMzMDdaFw0yNDExMDMwNjM4MDdaMDMxMTAvBgNV BAMTKEIzRDEwRUU2RjM3QzI0M0QwRDBDMDhGN0FBMDJCQTNDRDI1NTk1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLIKxJotukeDwrldytccQnh3b tGP1/5qAZjvgcSad7X9p98eNvvmMlxY5dTku8WkhAWZhZkDaGTfeBBgXXhtC1gcx QWHJ1m6ZT8wPgytFI6P73FMUcBTX1CyYI9m0toQQkNCKqxNoLVfOxRu8FlxjbphD QkRY9w7tTTBcWI0EzCIFXkDPkO1JZqzNz9qn1WUec7CnEiSmz4yfa6FZCdZkTFSH GpJ0ImiMXzHmksNnHhzEUVvTouelPRJt1K0VucArlmixUvc46J3shtH1YxJZW0hY 7Zl0RSu+i2bXC023ob58gDUCL2piEZWaixg0Td858sdnQRZley52XwWOoj47AgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSz0Q7m83wkPQ0M CPeqAro80lWVdjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYz M2NhZTNmLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRkYjUtYmJkMy01Y2Nh NjMzY2FlM2YvMS9CM0QxMEVFNkYzN0MyNDNEMEQwQzA4RjdBQTAyQkEzQ0QyNTU5 NTc2Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBAEwMGACoKYECfMA0GCSqG SIb3DQEBCwUAA4IBAQA5v1GQQQeIw+TU5eMgn5jFpqDqgMPxel7FS0X5VnKdYHhc gm9p827oKz1dHOBV2AlfpOe7MNOU6pszT3cdiOUghdiqtfsEZG/A9EDNdKFEbqwI Zt2jNYAoR1u63HOHkAFrGbXgyO+KExOncXLpAk43PS3Xyk8lpl6/dmTYcQf3OLG/ ldXkHiXMuYgdowEQVS236ErX8wymsWowszaPnY1+jx1RxZoYbuikNVc07APljA+9 iUxj4b/PQEKeoXTF3u0S/Va4cNQZrQPmXJO7c4hb6j3j7mJPCV+kQxTG0SQOhlOE PZPpx7jambpdTOSX46BTARNlM9wYibcxAwln3g3n -----END CERTIFICATE-----Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org