Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D181D1B412223885EDEEB993ADF7CDF1756C442D.cer
File:                     D181D1B412223885EDEEB993ADF7CDF1756C442D.cer (raw, json)
Hash identifier:          1gudm90piggOSG4zFwwpKncsKZcL9rp/UoVo9VRAzc4=
Subject key identifier:   D1:81:D1:B4:12:22:38:85:ED:EE:B9:93:AD:F7:CD:F1:75:6C:44:2D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4382E9CB24C34B9C068CA2637DBA343D1DC364CE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/D181D1B412223885EDEEB993ADF7CDF1756C442D.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 08 Jan 2024 23:54:07 +0000
Certificate not after:    Mon 06 Jan 2025 23:59:07 +0000
Subordinate resources:    IP: 2a06:9f81:3200::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:82:e9:cb:24:c3:4b:9c:06:8c:a2:63:7d:ba:34:3d:1d:c3:64:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jan  8 23:54:07 2024 GMT
            Not After : Jan  6 23:59:07 2025 GMT
        Subject: CN=D181D1B412223885EDEEB993ADF7CDF1756C442D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3d:76:13:77:43:ae:a7:08:e0:ce:54:84:d3:
                    62:a7:95:b8:c4:1b:27:9e:5c:dc:07:02:a5:49:2c:
                    d7:0e:fb:7c:8e:f4:7d:2b:6b:55:83:da:4f:d3:82:
                    37:c8:fb:42:32:cb:1a:b7:89:5a:7d:7e:dc:43:88:
                    7e:af:87:8a:1f:be:34:07:4b:cf:db:e1:55:32:0e:
                    36:56:74:67:cf:ce:23:04:9b:6f:5a:ff:bd:cb:41:
                    93:2b:4b:3a:b2:61:f1:55:54:72:6a:73:05:66:e8:
                    38:c1:45:99:8c:03:f8:f7:8b:aa:61:73:37:41:c3:
                    74:76:4b:56:a9:d1:2b:27:a6:42:3f:cf:f8:7b:d3:
                    ce:c4:04:ee:f8:fb:8c:2e:cb:7a:c3:8f:33:dc:b9:
                    1d:7c:a5:dd:5f:04:9f:e4:c6:b2:85:18:ed:1c:68:
                    9d:42:5f:94:af:6b:7b:b2:69:c4:a6:0b:1f:0b:0a:
                    6d:a8:97:6b:3d:f7:4e:c6:5a:e1:ea:eb:63:fd:e5:
                    74:56:3e:f5:d5:a6:ae:ff:4a:9e:e2:ec:c0:4e:06:
                    11:c1:d4:08:6b:e3:e1:72:d0:4f:5e:38:f9:41:f6:
                    e0:15:85:aa:d9:ca:c9:e1:09:ac:9e:d6:a4:14:b0:
                    c2:66:b4:a8:4d:25:4d:2a:72:9c:26:49:dd:18:58:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:81:D1:B4:12:22:38:85:ED:EE:B9:93:AD:F7:CD:F1:75:6C:44:2D
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/2/D181D1B412223885EDEEB993ADF7CDF1756C442D.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3200::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:58:9b:00:0f:a9:3a:c3:d4:6f:ec:ce:f1:89:23:d4:5e:e3:
         d0:91:16:b1:c9:c2:08:0f:30:49:2f:b4:c1:f9:54:3d:b0:c8:
         a0:89:5d:11:fe:58:78:0f:f7:db:81:12:0d:7c:74:f2:64:65:
         0f:d5:c4:01:d2:82:c1:ff:a1:11:fd:a4:70:18:dc:79:da:b7:
         43:dd:67:45:93:29:e2:06:64:d1:8a:de:c4:cb:11:e6:25:bf:
         2e:a9:a0:81:23:5c:55:8d:ca:b9:07:64:8b:0e:16:03:d8:91:
         a8:91:43:63:ca:2e:4b:d0:66:c3:4c:f7:4e:9c:07:c5:a1:c2:
         f1:79:a4:7b:e0:9b:a4:2a:dc:17:1e:c6:0d:ad:09:dc:de:87:
         e8:9f:1a:c6:b9:b8:3a:0c:97:47:09:a8:83:5e:84:bc:bb:77:
         5a:31:93:9a:73:bf:ac:0c:fa:c7:b1:9a:83:a2:90:30:fc:af:
         29:db:90:4f:53:5c:3f:71:a2:eb:c3:d4:d4:be:77:0b:72:73:
         c5:94:5b:ea:09:f4:bf:b5:64:76:30:db:76:90:c5:b3:20:3d:
         97:7b:93:90:68:83:5d:47:67:e5:1f:5c:83:22:08:a1:cf:7c:
         f1:c3:40:df:36:85:61:28:9b:f7:aa:1d:11:af:6e:c1:88:fb:
         a4:8c:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org