$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer File: CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer (raw, json) Hash identifier: X8tKDZvTYtIS/gdnd4EKY8AWKTM0NaknhiRZ5flAlVE= Subject key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 039267D3747ADC52529B0A230600A740CD77CA2D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 12 May 2024 06:21:33 +0000 Certificate not after: Sun 11 May 2025 06:26:33 +0000 Subordinate resources: IP: 2a05:dfc1:8000::/39 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:92:67:d3:74:7a:dc:52:52:9b:0a:23:06:00:a7:40:cd:77:ca:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: May 12 06:21:33 2024 GMT Not After : May 11 06:26:33 2025 GMT Subject: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:8b:fe:36:7e:6c:e1:94:45:61:f4:51:4d: 05:4d:ee:b0:f2:12:f6:15:86:f4:39:33:2c:bb:27: 59:a1:96:72:94:f7:db:a1:5b:a8:5a:0e:a4:82:3c: ff:44:b8:d4:41:c7:de:0b:82:c1:08:6b:a9:37:c7: c1:b5:ec:b0:48:c7:7e:df:a4:2f:b5:72:45:47:04: 67:81:14:e7:51:e2:6a:55:91:0d:56:45:60:63:9b: ae:6b:e6:55:b7:62:fc:4c:d4:3e:89:16:6e:27:95: ae:52:43:89:1e:c1:05:26:38:6c:73:9c:69:e5:30: cf:6d:b0:bc:e8:89:6e:bc:01:aa:03:c4:d8:b7:7c: f0:ed:ef:38:4c:0d:14:ed:e6:2b:52:27:08:a4:c1: fd:b6:cb:7d:b3:3d:a3:89:c5:12:6d:f3:0e:42:db: b3:2d:28:80:79:f5:f3:a3:44:ab:3e:74:2b:28:8f: f6:ea:09:25:ab:03:44:af:29:df:60:ac:b3:2c:47: d5:1e:40:b6:2f:5b:aa:db:b3:be:ad:e0:c7:02:45: 5f:15:de:74:f8:f1:1c:3f:55:ef:7e:07:61:6d:57: 3b:f8:7f:80:2c:07:38:c9:77:13:c4:c8:d7:a5:9c: 40:74:ab:9b:ee:6e:74:9b:c6:a8:78:1c:f7:dc:5e: c5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8000::/39 Signature Algorithm: sha256WithRSAEncryption 03:5d:d1:76:9c:71:99:ad:86:7c:4c:f3:ee:c7:b8:34:37:6e: 68:d8:a3:cc:58:c0:b9:2d:2c:62:1d:fc:26:0e:e0:79:8e:ec: a7:43:58:02:aa:e5:e5:4a:d6:44:10:69:85:58:14:62:eb:28: 4c:1a:99:95:e4:a3:80:7c:20:05:25:91:e8:99:6b:bc:c1:4f: 28:2f:49:7f:ef:c9:52:d2:86:81:6d:8c:40:c3:67:2d:6b:9d: a8:a9:30:a2:ce:19:90:07:21:98:42:53:41:a6:ed:00:25:79: fe:57:85:24:01:ef:02:2b:e4:f3:58:ba:4f:bd:0d:0e:0a:06: a4:26:90:01:de:ea:30:3c:b0:60:e0:88:26:3b:3e:76:b5:54: f4:f8:5b:71:0b:2e:1f:95:45:e1:f4:fa:54:4f:1f:1a:41:b0: 9c:2f:c4:b8:7b:91:1e:4a:60:f3:f9:02:4c:f3:ae:0b:6b:ae: 99:92:57:f8:4f:4e:c3:90:c2:5b:f8:2f:8b:9a:a9:44:f9:be: 3b:aa:91:b5:8b:ea:9e:c0:a9:1a:3e:1c:5e:a8:2c:3d:d3:10: 03:e0:c8:6a:0e:5f:13:e1:20:89:cb:a3:a1:40:5f:44:a2:2f: 8d:69:89:16:26:5f:e9:7d:2f:46:42:c3:95:16:70:30:4e:96: 90:ba:33:fe -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUA5Jn03R63FJSmwojBgCnQM13yi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA1MTIwNjIxMzNaFw0yNTA1MTEwNjI2MzNaMDMxMTAvBgNV BAMTKENBREM2NkE2RTU1QkVCQUZEREZBOEJENzJCMzEyN0M4QUVCNTBFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3ov+Nn5s4ZRFYfRRTQVN7rDy EvYVhvQ5Myy7J1mhlnKU99uhW6haDqSCPP9EuNRBx94LgsEIa6k3x8G17LBIx37f pC+1ckVHBGeBFOdR4mpVkQ1WRWBjm65r5lW3YvxM1D6JFm4nla5SQ4kewQUmOGxz nGnlMM9tsLzoiW68AaoDxNi3fPDt7zhMDRTt5itSJwikwf22y32zPaOJxRJt8w5C 27MtKIB59fOjRKs+dCsoj/bqCSWrA0SvKd9grLMsR9UeQLYvW6rbs76t4McCRV8V 3nT48Rw/Ve9+B2FtVzv4f4AsBzjJdxPEyNelnEB0q5vubnSbxqh4HPfcXsWPAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTK3Gam5Vvrr936 i9crMSfIrrUOwjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5 ZmVlYjdkLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9jOTkyNjVlZi0yMmE5LTQxMDAtYTIzZC01MWE5 ZDlmZWViN2QvMS9DQURDNjZBNkU1NUJFQkFGRERGQThCRDcyQjMxMjdDOEFFQjUw RUMyLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgEqBd/BgDANBgkqhkiG9w0BAQsF AAOCAQEAA13Rdpxxma2GfEzz7se4NDduaNijzFjAuS0sYh38Jg7geY7sp0NYAqrl 5UrWRBBphVgUYusoTBqZleSjgHwgBSWR6JlrvMFPKC9Jf+/JUtKGgW2MQMNnLWud qKkwos4ZkAchmEJTQabtACV5/leFJAHvAivk81i6T70NDgoGpCaQAd7qMDywYOCI Jjs+drVU9PhbcQsuH5VF4fT6VE8fGkGwnC/EuHuRHkpg8/kCTPOuC2uumZJX+E9O w5DCW/gvi5qpRPm+O6qRtYvqnsCpGj4cXqgsPdMQA+DIag5fE+EgicujoUBfRKIv jWmJFiZf6X0vRkLDlRZwME6WkLoz/g== -----END CERTIFICATE-----Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org