Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
File:                     F066639311596E151E78E34CCC584DC5F500F585.cer (raw, json)
Hash identifier:          ZcuaaeD3gO2bWkXwQUwKYcYNMT2BMQCmQpXTnxUuVCo=
Subject key identifier:   F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       61D61F46B7383AA4917E40F3E02EB7974C04719F
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 24 Oct 2024 07:32:49 +0000
Certificate not after:    Thu 23 Oct 2025 07:37:49 +0000
Subordinate resources:    IP: 2a0a:6040:1100::/40
                          IP: 2a0a:6040:3f00::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d6:1f:46:b7:38:3a:a4:91:7e:40:f3:e0:2e:b7:97:4c:04:71:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct 24 07:32:49 2024 GMT
            Not After : Oct 23 07:37:49 2025 GMT
        Subject: CN=F066639311596E151E78E34CCC584DC5F500F585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:d7:d2:13:51:9a:d1:96:4e:44:7e:54:9b:
                    59:5b:14:21:f1:9c:7a:2f:a4:28:90:d9:61:66:39:
                    14:eb:fb:ad:b4:08:40:7e:25:6c:e1:a4:38:e5:5d:
                    02:ac:3c:db:78:c2:f5:a6:85:28:31:00:e8:d2:13:
                    20:0e:fe:8a:a5:46:31:63:33:ca:3c:db:b7:37:ca:
                    d7:ba:aa:01:5b:af:84:f8:85:f9:76:7d:84:81:81:
                    e9:e2:e2:1c:da:2c:96:1b:02:ec:87:2a:5c:77:53:
                    e3:2f:28:09:7f:03:e1:46:30:99:e3:09:53:ab:ce:
                    cc:3f:b5:bb:ed:37:59:e6:03:62:d0:51:46:20:67:
                    52:81:b5:d1:cb:1e:d4:f4:93:34:30:c2:a4:68:6b:
                    c3:fa:a6:f5:e9:3a:20:df:8c:d6:46:f1:7d:0b:55:
                    4f:a4:74:45:48:04:7d:79:7f:9e:43:ff:5c:ed:e2:
                    93:0c:32:79:f9:89:33:a7:d9:b6:58:37:c7:4e:c1:
                    4d:6c:b3:17:3b:d3:b7:61:0b:1f:d1:d2:85:a1:ab:
                    76:36:0e:5c:83:2f:be:c0:f8:1e:db:a7:53:61:44:
                    40:48:5f:f1:dc:98:15:95:98:bd:c6:cb:c2:4f:d0:
                    79:44:f0:b5:de:67:fb:72:97:33:83:3f:a7:3b:1d:
                    67:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1100::/40
                  2a0a:6040:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:bb:92:b8:eb:61:2d:0a:9b:fc:69:c5:df:bc:78:ba:37:61:
         13:af:d2:49:2c:87:74:bd:e8:01:e0:5b:2e:7b:fa:20:b1:43:
         b9:ca:11:86:24:be:f7:69:f5:6c:d7:6a:f6:bd:a1:14:26:fa:
         2d:1f:03:9c:bb:d8:f6:98:71:52:25:30:b0:30:1d:81:eb:a4:
         d4:2f:60:77:27:f3:e2:53:5c:81:39:08:06:7d:f7:43:fd:76:
         f6:20:c3:db:27:60:0f:85:b3:73:d8:3b:69:6c:c6:48:86:46:
         87:8a:ab:1c:78:c1:77:26:fa:98:19:52:71:cd:55:d0:ef:6c:
         09:98:6f:8a:e5:c3:a2:d6:83:62:1f:6d:33:3d:b8:78:2a:cb:
         8f:e2:86:0d:01:40:34:ce:54:54:2e:1f:58:1d:0b:0b:75:48:
         ef:c8:85:d5:97:d3:2d:86:d1:2a:99:81:22:4f:93:b7:f9:1c:
         4d:26:30:ca:39:5d:ef:71:2c:b6:c8:f5:2a:6a:fc:1c:3c:c4:
         0f:1c:58:c6:77:19:ca:28:1a:a2:fd:46:6e:73:b6:cc:6f:3f:
         8d:69:a0:ab:5f:de:80:bc:9a:38:61:00:00:a0:27:1d:ff:c3:
         55:b8:1a:24:0d:82:6e:a8:82:6c:4c:9d:2f:e8:5d:28:89:2d:
         9b:9a:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org