Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
File:                     F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer (raw, json)
Hash identifier:          LR5L28bT/z5gjZGigFttcmk6oDxUtKTqZAES/xG8xKA=
Subject key identifier:   F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       22E7AD013EC1FE9F5FDD7DC5E13A4120192A7411
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sun 25 Feb 2024 06:05:56 +0000
Certificate not after:    Sun 23 Feb 2025 06:10:56 +0000
Subordinate resources:    IP: 2a05:dfc1:1000::/40
                          IP: 2a0a:6040:4b00::/40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e7:ad:01:3e:c1:fe:9f:5f:dd:7d:c5:e1:3a:41:20:19:2a:74:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Feb 25 06:05:56 2024 GMT
            Not After : Feb 23 06:10:56 2025 GMT
        Subject: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:9a:2f:3b:8e:2b:28:b5:95:51:ce:e8:94:
                    4e:0e:7f:c5:f7:e7:fb:82:19:68:9c:ea:1f:03:90:
                    58:26:a1:e5:9c:2b:7d:9d:6e:a5:41:fe:00:77:fc:
                    97:9e:f6:0e:82:e2:6b:89:9d:6c:76:99:e1:2b:0e:
                    24:78:fb:fb:d3:3f:fa:65:c9:2e:9a:5d:0c:7a:3d:
                    a4:84:75:0e:38:06:0a:4a:09:2c:5b:6f:f5:c5:3d:
                    de:f1:b4:48:6d:14:c5:2a:e2:29:ef:d0:9d:72:48:
                    f4:4f:f8:92:66:79:a4:57:46:ac:7a:6e:fd:28:ff:
                    ee:ee:12:3d:0e:a5:b6:3c:93:29:30:b6:89:55:98:
                    72:cd:b5:29:d5:59:c8:ac:73:87:44:70:0c:24:cd:
                    c6:6a:16:9b:41:04:1e:ab:5b:ee:5d:4d:68:59:8e:
                    9a:b5:37:b3:60:4a:f4:c9:51:75:47:6d:8f:c8:20:
                    a0:39:c4:02:9a:10:4b:10:7a:59:30:8e:2a:65:b0:
                    89:59:71:43:fa:c6:25:5d:d4:6a:ff:cc:19:55:b1:
                    e9:dc:e8:d6:da:67:db:0d:7d:dd:7b:7d:c8:0c:96:
                    93:76:69:98:44:90:a2:79:df:cb:60:50:58:ff:17:
                    78:67:f5:e0:e2:11:9c:99:c2:0b:4f:a0:c8:ac:f5:
                    1b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1000::/40
                  2a0a:6040:4b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:ee:a0:ed:b2:fb:6b:2e:33:70:68:9f:73:89:02:50:74:
         51:5c:fa:64:f9:9a:9e:e4:5b:ee:a3:48:25:53:31:9e:e0:2b:
         04:d4:d0:1b:f6:ca:04:aa:18:3e:ad:32:b9:23:40:7a:6b:bc:
         68:26:ea:be:bb:06:b7:0c:02:93:00:fd:0a:92:79:c3:52:37:
         00:f6:a9:17:39:f7:36:3a:50:d9:96:c2:84:13:d6:d5:7f:f7:
         95:0b:01:02:55:d9:0b:57:19:f0:65:71:b3:ed:22:c3:bc:7a:
         5b:82:f8:2f:64:6c:49:24:33:3a:09:c2:42:a9:67:24:d7:d7:
         24:52:74:9d:02:ac:ea:09:fe:e1:7b:05:89:69:9b:67:a0:a7:
         1a:b7:b3:01:4b:ce:5e:40:c2:db:c1:49:b7:86:53:a3:ef:5e:
         cd:c4:18:25:89:80:83:77:5b:93:7a:99:bb:95:9b:01:4d:ad:
         95:40:74:3a:ed:67:c0:4f:b5:b5:bf:a7:6b:54:29:6d:b5:0d:
         b8:3f:67:df:5f:10:dd:da:50:e2:b2:bd:55:4c:a7:6c:21:b6:
         ef:84:7a:f2:75:a4:7c:df:b3:da:94:20:df:fe:05:ad:f7:0a:
         30:76:95:35:32:87:de:26:fd:aa:3d:93:6b:91:89:f4:b1:7b:
         de:29:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:08:22 2024 by rpki-client on console-fra.rpki-client.org