$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer File: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer (raw, json) Hash identifier: zqobT7FqmZf3xknrDfZ+p32eFYnY6H01F5tMscVU8oY= Subject key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3F00A583338F32A42E7EA3E1789954D630B88A2C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 24 Oct 2024 07:32:52 +0000 Certificate not after: Thu 23 Oct 2025 07:37:52 +0000 Subordinate resources: IP: 2a0a:6040:1100::/40 IP: 2a0a:6040:3f00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:00:a5:83:33:8f:32:a4:2e:7e:a3:e1:78:99:54:d6:30:b8:8a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 24 07:32:52 2024 GMT Not After : Oct 23 07:37:52 2025 GMT Subject: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c2:67:f0:ca:47:4c:5e:fe:28:5a:3d:1d:f4: b8:35:57:c5:d3:4a:b5:7f:f5:58:6a:fd:ed:3b:23: b6:b6:99:84:cc:96:23:5c:34:3e:aa:c4:70:0b:b5: c3:72:6e:7c:8f:39:1b:6a:9b:df:24:75:0d:74:2f: 01:a0:1a:80:80:cf:6a:73:e8:ac:ec:d8:2b:ca:7c: ee:0c:69:cc:5f:61:c0:92:30:f0:7f:9e:44:0d:2b: f7:38:5f:8b:a1:54:ce:f5:fb:1a:8b:b1:29:91:9f: 05:e9:5f:f7:a2:53:6b:eb:d0:ed:ab:cd:2b:eb:7d: e2:50:33:49:b7:aa:c7:f8:92:2c:2e:6e:94:b8:61: 13:f7:fd:50:e5:61:e4:e1:63:72:4d:bb:69:67:32: 97:0e:42:76:a7:29:2b:b0:f4:f5:90:86:a7:7f:ea: b9:3c:43:47:88:65:4a:25:bb:b7:69:7c:dd:ce:d8: b3:be:bf:82:5d:56:29:33:21:7d:f3:58:db:fd:e7: e2:e1:f1:e1:38:67:4f:4c:6d:c3:99:6f:30:a4:bf: 33:67:00:e5:53:96:3f:2e:93:bb:85:71:aa:78:fc: 1e:ff:39:e2:57:b7:1d:b4:07:ee:3c:1d:62:50:4a: 9b:b0:7a:33:0e:bb:eb:69:ed:e4:56:ef:5f:0d:1b: 3d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1100::/40 2a0a:6040:3f00::/40 Signature Algorithm: sha256WithRSAEncryption 15:1f:12:54:66:3a:98:51:e7:16:bb:d8:ab:97:bd:e3:68:e1: 17:cc:a5:cd:31:6a:1e:d2:0b:19:c0:fa:a1:67:de:3e:22:51: 38:d4:43:5b:50:d1:7a:10:0d:d9:fd:de:7b:97:49:31:66:70: a2:db:27:46:cc:57:a6:fc:dd:7c:b5:ab:8c:22:52:d9:f0:9f: f0:b0:98:91:07:44:cc:08:b0:d2:6b:f4:24:d9:bb:c3:f1:24: 57:ce:bf:05:8a:b5:95:0f:fc:65:c9:3e:fd:e7:73:fc:3d:72: c3:64:fa:31:03:58:fe:1d:d2:89:bf:11:f1:9a:f2:f1:33:2b: 46:0c:e7:df:d8:5d:13:2b:28:f9:78:48:b5:82:4b:ed:b7:ea: f2:0a:aa:ec:f9:fa:f6:24:8b:db:16:86:90:2d:19:3b:fa:f1: 1f:9b:bd:dd:90:cb:43:c1:a7:17:c3:43:53:cb:a6:03:79:f0: c2:a9:03:54:50:da:ac:11:33:63:ff:3b:26:5d:55:2d:7a:98: f9:93:15:3b:31:b2:e2:d0:39:0a:cd:38:19:98:6c:29:a5:db: dc:69:5f:c5:9f:44:39:8f:6c:13:d2:13:b7:1a:d4:e2:f1:4c: b3:4f:31:cb:85:19:10:ce:b8:42:64:5a:ae:39:0a:3a:2f:82: 90:f1:1a:74 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUPwClgzOPMqQufqPheJlU1jC4iiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMjQwNzMyNTJaFw0yNTEwMjMwNzM3NTJaMDMxMTAvBgNV BAMTKEY5MDBCQzY1RTJCNjQ2RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuwmfwykdMXv4oWj0d9Lg1V8XT SrV/9Vhq/e07I7a2mYTMliNcND6qxHALtcNybnyPORtqm98kdQ10LwGgGoCAz2pz 6Kzs2CvKfO4MacxfYcCSMPB/nkQNK/c4X4uhVM71+xqLsSmRnwXpX/eiU2vr0O2r zSvrfeJQM0m3qsf4kiwubpS4YRP3/VDlYeThY3JNu2lnMpcOQnanKSuw9PWQhqd/ 6rk8Q0eIZUolu7dpfN3O2LO+v4JdVikzIX3zWNv95+Lh8eE4Z09MbcOZbzCkvzNn AOVTlj8uk7uFcap4/B7/OeJXtx20B+48HWJQSpuwejMOu+tp7eRW718NGz09AgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5ALxl4rZG66xH Kl3qEr2wARrBIjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFm ZDJiZTRlLzMvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03Mjc4LTQ2Y2YtYWJkMS05OWNk MWZkMmJlNGUvMy9GOTAwQkM2NUUyQjY0NkVCQUM0NzJBNURFQTEyQkRCMDAxMUFD MTIyLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBAEQMGACoKYEA/MA0GCSqG SIb3DQEBCwUAA4IBAQAVHxJUZjqYUecWu9irl73jaOEXzKXNMWoe0gsZwPqhZ94+ IlE41ENbUNF6EA3Z/d57l0kxZnCi2ydGzFem/N18tauMIlLZ8J/wsJiRB0TMCLDS a/Qk2bvD8SRXzr8FirWVD/xlyT7953P8PXLDZPoxA1j+HdKJvxHxmvLxMytGDOff 2F0TKyj5eEi1gkvtt+ryCqrs+fr2JIvbFoaQLRk7+vEfm73dkMtDwacXw0NTy6YD efDCqQNUUNqsETNj/zsmXVUtepj5kxU7MbLi0DkKzTgZmGwppdvcaV/Fn0Q5j2wT 0hO3GtTi8UyzTzHLhRkQzrhCZFquOQo6L4KQ8Rp0 -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org