Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer
File:                     EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer (raw, json)
Hash identifier:          /SoZNgucLbjtYdg0y5mZ9zK5de6ALCFU5/XFuQyitBs=
Subject key identifier:   EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       62BE1A93F1702CC60D3A2FB2C0220C750B23BF61
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 23 Jan 2023 02:06:40 +0000
Certificate not after:    Mon 22 Jan 2024 02:11:40 +0000
Subordinate resources:    IP: 2a0a:6040:1a00::/40

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:be:1a:93:f1:70:2c:c6:0d:3a:2f:b2:c0:22:0c:75:0b:23:bf:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jan 23 02:06:40 2023 GMT
            Not After : Jan 22 02:11:40 2024 GMT
        Subject: CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:67:30:cd:44:80:b2:10:16:df:34:f1:3d:
                    9b:00:cc:0b:07:8d:98:4e:71:e0:81:6b:58:bc:47:
                    5b:79:57:72:d0:9d:c6:10:59:d2:83:c1:39:01:2b:
                    f7:7d:8d:57:b1:73:e5:b6:14:de:a0:47:0b:91:7f:
                    4f:48:95:40:76:3c:2d:54:8f:cb:d1:19:1f:d9:85:
                    0c:45:e1:50:a0:7e:1b:9b:5f:af:d7:19:79:c9:79:
                    1b:e3:d9:b0:0d:88:d0:cd:a1:4f:dd:60:b5:fe:df:
                    f3:8e:80:6d:7b:66:a5:e7:90:06:15:02:f4:cc:fe:
                    54:42:ec:81:6a:78:77:d8:27:2d:f6:3c:ec:ea:34:
                    aa:42:e7:9d:69:b5:aa:1f:82:fa:e3:ba:0f:73:bd:
                    1d:3f:83:f6:94:7d:d4:d1:a6:48:39:20:af:8c:2c:
                    b1:cf:4a:c7:bd:a7:bf:a2:17:b4:8d:43:f4:64:0f:
                    cc:25:35:bf:fc:fe:1f:32:cf:d0:33:a8:6f:b2:77:
                    1e:4f:f6:a9:f2:01:e1:5c:ad:dc:95:7e:9a:1b:b4:
                    b9:99:99:d2:d7:f4:32:d8:94:20:ec:01:cb:2d:a8:
                    85:51:40:44:84:0a:24:5b:91:9e:3e:0d:55:b5:91:
                    f1:4d:48:47:15:79:81:07:5e:ca:91:36:c4:ed:ec:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:47:04:b6:38:80:15:3c:a0:2d:eb:4c:c3:c0:85:ca:d0:07:
         02:d1:cb:0d:4c:3b:86:91:cd:af:bd:21:e2:fc:52:ac:c4:5d:
         e8:18:c3:d0:de:fb:24:87:9d:11:74:f5:aa:f4:11:e4:09:91:
         c4:2f:95:2f:2f:10:55:ef:1f:bc:9a:16:da:ed:14:6c:1c:e3:
         b1:55:d9:33:e6:be:bb:aa:9a:f1:e6:47:1c:a8:15:75:2d:43:
         c9:4a:89:77:3a:ad:c7:fd:3b:b2:e7:83:63:41:5e:50:1d:fa:
         3c:04:28:c4:7a:a9:89:e3:01:47:b1:f5:b3:ab:05:18:97:f5:
         f2:4f:44:bc:43:eb:eb:d1:7b:bc:74:ec:33:58:ed:f2:cf:08:
         75:de:6b:cf:8d:1b:f0:ce:07:13:66:2e:c4:73:08:58:fa:d8:
         43:74:0b:16:b5:42:23:4a:e2:d4:6e:79:2a:ce:32:38:f5:4d:
         66:a4:b0:40:17:3f:a9:95:cb:43:67:81:34:53:3b:90:e0:8d:
         61:e0:3a:35:c9:82:a1:80:71:49:d8:73:f5:65:73:5d:af:3c:
         b9:c4:c6:49:7b:b8:b2:5a:85:3c:47:bb:e7:3e:24:3b:53:7a:
         90:5e:a1:67:23:47:bc:2c:f1:21:86:72:35:f1:c8:15:4d:e8:
         19:5a:91:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----