$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D5131EA7CE59E57775DE7C271A69CCF2356A207F.cer File: D5131EA7CE59E57775DE7C271A69CCF2356A207F.cer (raw, json) Hash identifier: iXPinzrAzknKAywE1D5Ld+mWF90kzfZQzYASHRE/YqI= Subject key identifier: D5:13:1E:A7:CE:59:E5:77:75:DE:7C:27:1A:69:CC:F2:35:6A:20:7F Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 533C353CF294236CF23F56E12541ACAEDF8D2524 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rpki.komorebi.network/repo/komorebi/4/D5131EA7CE59E57775DE7C271A69CCF2356A207F.mft caRepository: rsync://rpki.komorebi.network/repo/komorebi/4/ Notify URL: https://rpki.komorebi.network:3030/rrdp/notification.xml Certificate not before: Mon 11 Nov 2024 10:00:25 +0000 Certificate not after: Mon 10 Nov 2025 10:05:25 +0000 Subordinate resources: IP: 2a0a:6040:3000::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Nov 2024 14:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:3c:35:3c:f2:94:23:6c:f2:3f:56:e1:25:41:ac:ae:df:8d:25:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 11 10:00:25 2024 GMT Not After : Nov 10 10:05:25 2025 GMT Subject: CN=D5131EA7CE59E57775DE7C271A69CCF2356A207F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:df:50:26:ba:e9:89:f6:41:9e:15:f7:b1: 01:bb:14:cb:f4:e3:59:b4:7a:0b:07:cd:71:73:a1: 3e:a6:02:8a:ab:4c:7c:05:7c:f9:cc:a9:2e:cf:56: 8b:ff:07:20:f6:16:0c:3a:d6:65:b8:43:1e:df:ab: 98:e0:02:91:a1:81:f3:28:8d:da:c7:0e:a2:5b:a5: 03:c4:64:03:a7:f7:d2:cf:81:4a:c6:ab:28:14:a5: 58:08:7b:63:19:06:af:14:e5:d1:93:ce:55:1b:c9: 0f:8d:41:17:1f:3b:fc:96:6a:ea:9e:60:1a:e3:79: 24:e0:d2:97:ea:6b:1b:55:f7:87:ee:52:65:db:72: a4:42:41:3c:e8:05:01:a2:78:04:79:26:14:9d:98: 7d:41:c2:dc:bd:66:e3:77:c1:7e:45:97:3f:62:48: 4e:b8:5c:62:c3:19:cc:d9:e9:8f:0e:4a:cc:bc:0c: a2:7b:67:17:89:e0:89:17:c5:d5:9a:83:15:e9:fc: 68:1f:29:96:7c:b6:96:c9:c3:93:3a:ba:de:1a:46: d0:18:b8:45:ad:da:5f:c0:7a:62:c4:50:01:21:7e: 35:01:73:13:3c:fe:b5:b5:6a:84:93:a6:7f:e2:58: 86:f2:91:79:af:b0:0e:21:04:c3:ca:39:14:08:73: 17:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:13:1E:A7:CE:59:E5:77:75:DE:7C:27:1A:69:CC:F2:35:6A:20:7F X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rpki.komorebi.network/repo/komorebi/4/ RPKI Manifest - URI:rsync://rpki.komorebi.network/repo/komorebi/4/D5131EA7CE59E57775DE7C271A69CCF2356A207F.mft RPKI Notify - URI:https://rpki.komorebi.network:3030/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:1b:70:26:8a:5c:2d:81:08:94:72:22:a6:29:d4:c5:12:73: 46:90:69:2a:ff:59:51:a9:13:d5:87:e2:aa:af:a6:f9:5c:1f: d7:ac:bc:1a:08:81:cc:65:13:4d:ef:0c:3a:b2:c8:a1:1e:ea: 09:d1:00:2c:f2:a5:d9:80:6b:c5:41:56:d3:ba:54:1e:6a:91: 11:eb:aa:52:6a:5a:d8:9c:8c:6c:92:56:63:47:09:b4:44:a2: 85:ae:1e:16:42:43:f3:81:fa:0e:d8:a3:c1:d8:30:85:59:57: b9:e8:05:ac:05:94:93:32:e2:b5:16:05:90:42:9c:bc:a6:91: 5e:72:88:f1:7f:03:5f:d8:83:67:64:50:0a:17:e4:64:4e:50: 92:6c:20:51:35:49:5b:9d:e4:2c:e1:e5:c5:c4:aa:3f:a5:a2: 55:ee:02:05:81:da:ca:1c:15:61:ce:b5:8a:eb:69:f6:22:c8: 4b:32:4c:ea:e6:c6:53:59:88:92:e7:0b:96:eb:51:e7:17:38: d6:0b:e7:b3:fd:19:85:aa:cc:98:a3:e5:44:0b:ba:86:07:c8: 67:5f:eb:86:d3:6f:06:a1:87:73:14:b7:41:65:6a:f2:b1:1b: a4:1d:75:7c:64:10:1d:59:8e:15:58:20:a4:0d:5f:b9:bd:c5: 49:24:d0:d2 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUUzw1PPKUI2zyP1bhJUGsrt+NJSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDExMTExMDAwMjVaFw0yNTExMTAxMDA1MjVaMDMxMTAvBgNV BAMTKEQ1MTMxRUE3Q0U1OUU1Nzc3NURFN0MyNzFBNjlDQ0YyMzU2QTIwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO699QJrrpifZBnhX3sQG7FMv0 41m0egsHzXFzoT6mAoqrTHwFfPnMqS7PVov/ByD2Fgw61mW4Qx7fq5jgApGhgfMo jdrHDqJbpQPEZAOn99LPgUrGqygUpVgIe2MZBq8U5dGTzlUbyQ+NQRcfO/yWauqe YBrjeSTg0pfqaxtV94fuUmXbcqRCQTzoBQGieAR5JhSdmH1Bwty9ZuN3wX5Flz9i SE64XGLDGczZ6Y8OSsy8DKJ7ZxeJ4IkXxdWagxXp/GgfKZZ8tpbJw5M6ut4aRtAY uEWt2l/AemLEUAEhfjUBcxM8/rW1aoSTpn/iWIbykXmvsA4hBMPKORQIcxfzAgMB AAGjggKmMIICojAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVEx6nzlnld3Xe fCcaaczyNWogfzAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCB+gYIKwYBBQUHAQsE ge0wgeowOgYIKwYBBQUHMAWGLnJzeW5jOi8vcnBraS5rb21vcmViaS5uZXR3b3Jr L3JlcG8va29tb3JlYmkvNC8wZgYIKwYBBQUHMAqGWnJzeW5jOi8vcnBraS5rb21v cmViaS5uZXR3b3JrL3JlcG8va29tb3JlYmkvNC9ENTEzMUVBN0NFNTlFNTc3NzVE RTdDMjcxQTY5Q0NGMjM1NkEyMDdGLm1mdDBEBggrBgEFBQcwDYY4aHR0cHM6Ly9y cGtpLmtvbW9yZWJpLm5ldHdvcms6MzAzMC9ycmRwL25vdGlmaWNhdGlvbi54bWww GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQC AAIwCAMGACoKYEAwMA0GCSqGSIb3DQEBCwUAA4IBAQALG3AmilwtgQiUciKmKdTF EnNGkGkq/1lRqRPVh+Kqr6b5XB/XrLwaCIHMZRNN7ww6ssihHuoJ0QAs8qXZgGvF QVbTulQeapER66pSalrYnIxsklZjRwm0RKKFrh4WQkPzgfoO2KPB2DCFWVe56AWs BZSTMuK1FgWQQpy8ppFecojxfwNf2INnZFAKF+RkTlCSbCBRNUlbneQs4eXFxKo/ paJV7gIFgdrKHBVhzrWK62n2IshLMkzq5sZTWYiS5wuW61HnFzjWC+ez/RmFqsyY o+VEC7qGB8hnX+uG028GoYdzFLdBZWrysRukHXV8ZBAdWY4VWCCkDV+5vcVJJNDS -----END CERTIFICATE-----Generated at Sun Nov 24 03:16:14 2024 by rpki-client on console-ams.rpki-client.org