Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
File:                     F066639311596E151E78E34CCC584DC5F500F585.cer (raw, json)
Hash identifier:          IvRkjxz5kTBokNrdYxd1tpbdZZPXb5se4WsJ4jQP3+k=
Subject key identifier:   F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       581D121F1AFCAA283725EAEE9D7AE8B55507FE72
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 23 Nov 2023 05:50:34 +0000
Certificate not after:    Thu 21 Nov 2024 05:55:34 +0000
Subordinate resources:    IP: 2a0a:6040:1100::/40
                          IP: 2a0a:6040:3f00::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1d:12:1f:1a:fc:aa:28:37:25:ea:ee:9d:7a:e8:b5:55:07:fe:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov 23 05:50:34 2023 GMT
            Not After : Nov 21 05:55:34 2024 GMT
        Subject: CN=F066639311596E151E78E34CCC584DC5F500F585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:d7:d2:13:51:9a:d1:96:4e:44:7e:54:9b:
                    59:5b:14:21:f1:9c:7a:2f:a4:28:90:d9:61:66:39:
                    14:eb:fb:ad:b4:08:40:7e:25:6c:e1:a4:38:e5:5d:
                    02:ac:3c:db:78:c2:f5:a6:85:28:31:00:e8:d2:13:
                    20:0e:fe:8a:a5:46:31:63:33:ca:3c:db:b7:37:ca:
                    d7:ba:aa:01:5b:af:84:f8:85:f9:76:7d:84:81:81:
                    e9:e2:e2:1c:da:2c:96:1b:02:ec:87:2a:5c:77:53:
                    e3:2f:28:09:7f:03:e1:46:30:99:e3:09:53:ab:ce:
                    cc:3f:b5:bb:ed:37:59:e6:03:62:d0:51:46:20:67:
                    52:81:b5:d1:cb:1e:d4:f4:93:34:30:c2:a4:68:6b:
                    c3:fa:a6:f5:e9:3a:20:df:8c:d6:46:f1:7d:0b:55:
                    4f:a4:74:45:48:04:7d:79:7f:9e:43:ff:5c:ed:e2:
                    93:0c:32:79:f9:89:33:a7:d9:b6:58:37:c7:4e:c1:
                    4d:6c:b3:17:3b:d3:b7:61:0b:1f:d1:d2:85:a1:ab:
                    76:36:0e:5c:83:2f:be:c0:f8:1e:db:a7:53:61:44:
                    40:48:5f:f1:dc:98:15:95:98:bd:c6:cb:c2:4f:d0:
                    79:44:f0:b5:de:67:fb:72:97:33:83:3f:a7:3b:1d:
                    67:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1100::/40
                  2a0a:6040:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:4a:3e:45:74:a8:40:8d:f4:ba:02:54:3f:4d:b6:52:06:2f:
         0a:f9:bf:76:12:01:be:4b:c6:3b:48:a4:d5:40:d2:15:75:ff:
         d2:d1:20:16:6e:04:af:a6:3a:c0:d1:18:ff:9c:34:ea:43:a5:
         6a:0a:b7:dc:c3:53:73:86:86:02:88:3e:93:2f:ec:d3:f6:3b:
         79:fb:27:16:57:b3:47:bb:af:1e:54:6a:84:6c:30:81:b1:f1:
         65:a1:fd:43:ae:89:20:aa:3d:68:eb:33:c7:1a:7c:10:bd:ef:
         b4:09:17:5c:bf:4f:e6:c6:f6:17:63:df:c7:57:b2:4d:3f:b7:
         69:5f:c9:a9:66:25:bb:be:3c:c9:99:15:4f:66:8e:1d:9c:3d:
         dd:ba:40:67:7c:c1:67:01:69:73:34:f0:1d:8b:bb:0a:b0:69:
         0d:fc:4f:e1:07:c4:fe:b7:20:ba:58:7c:8c:f6:fb:e0:5b:2c:
         3e:43:61:11:ec:c7:ef:fa:67:41:81:8e:ef:f5:de:a8:b7:fd:
         82:45:09:0f:f7:58:36:f3:bb:26:d4:f9:75:0f:aa:03:c1:cc:
         9b:f6:ff:d1:5c:a1:18:a0:f9:23:76:ca:35:03:16:46:6b:2b:
         ab:b0:e0:1c:0a:9c:4d:0f:76:8b:7c:82:1a:dc:f5:dc:94:2b:
         34:39:8f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:08:22 2024 by rpki-client on console-fra.rpki-client.org