$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer File: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer (raw, json) Hash identifier: DltL1gfHOhkj9j4pK3/Ygf6HnHXpYtriDm0Fq4zQ4vg= Subject key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 247F642819AF41A791660FFD44C62CF4486E41A2 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 23 Nov 2023 05:50:37 +0000 Certificate not after: Thu 21 Nov 2024 05:55:37 +0000 Subordinate resources: IP: 2a0a:6040:1100::/40 IP: 2a0a:6040:3f00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7f:64:28:19:af:41:a7:91:66:0f:fd:44:c6:2c:f4:48:6e:41:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 23 05:50:37 2023 GMT Not After : Nov 21 05:55:37 2024 GMT Subject: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c2:67:f0:ca:47:4c:5e:fe:28:5a:3d:1d:f4: b8:35:57:c5:d3:4a:b5:7f:f5:58:6a:fd:ed:3b:23: b6:b6:99:84:cc:96:23:5c:34:3e:aa:c4:70:0b:b5: c3:72:6e:7c:8f:39:1b:6a:9b:df:24:75:0d:74:2f: 01:a0:1a:80:80:cf:6a:73:e8:ac:ec:d8:2b:ca:7c: ee:0c:69:cc:5f:61:c0:92:30:f0:7f:9e:44:0d:2b: f7:38:5f:8b:a1:54:ce:f5:fb:1a:8b:b1:29:91:9f: 05:e9:5f:f7:a2:53:6b:eb:d0:ed:ab:cd:2b:eb:7d: e2:50:33:49:b7:aa:c7:f8:92:2c:2e:6e:94:b8:61: 13:f7:fd:50:e5:61:e4:e1:63:72:4d:bb:69:67:32: 97:0e:42:76:a7:29:2b:b0:f4:f5:90:86:a7:7f:ea: b9:3c:43:47:88:65:4a:25:bb:b7:69:7c:dd:ce:d8: b3:be:bf:82:5d:56:29:33:21:7d:f3:58:db:fd:e7: e2:e1:f1:e1:38:67:4f:4c:6d:c3:99:6f:30:a4:bf: 33:67:00:e5:53:96:3f:2e:93:bb:85:71:aa:78:fc: 1e:ff:39:e2:57:b7:1d:b4:07:ee:3c:1d:62:50:4a: 9b:b0:7a:33:0e:bb:eb:69:ed:e4:56:ef:5f:0d:1b: 3d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1100::/40 2a0a:6040:3f00::/40 Signature Algorithm: sha256WithRSAEncryption b3:2b:5d:69:60:a3:ce:0c:86:69:c2:07:c0:49:47:2c:fd:9d: 7d:a3:61:60:7b:6f:e7:44:9d:3d:e7:af:98:9a:ea:11:de:93: c0:e8:53:f9:f8:d0:c1:73:27:96:1a:d1:95:bc:1a:e9:22:bb: 05:d5:eb:f1:f1:e9:55:bf:26:94:1b:17:70:07:ee:90:c5:38: 80:cb:12:44:aa:87:94:2f:d2:bf:49:56:d4:d4:56:00:5b:8f: be:00:80:68:06:35:38:97:56:fd:71:1c:3e:8a:fb:e0:a5:fc: b0:1b:39:0e:14:46:de:62:39:0f:84:7f:d2:c3:fa:4a:bb:76: dc:e2:a9:84:c3:b4:e0:0c:49:71:71:d8:8e:ff:ef:9a:db:90: 4e:87:f1:22:41:2c:d0:cd:95:12:c0:41:aa:67:bf:1a:39:01: 4e:a6:50:6f:4c:f2:09:35:86:c5:f8:56:e5:78:a4:a9:2e:67: 3d:23:49:d4:5e:2e:c5:ce:3d:28:41:98:7f:48:08:db:2a:c1: 6a:8b:4a:50:ab:77:e9:cd:52:3d:d3:51:4a:60:66:f4:52:1e: 31:ee:d9:e1:a3:5d:57:d4:68:b4:39:60:41:43:20:b0:d5:41: 40:7c:64:2d:6a:ce:4d:21:d5:dc:0e:8f:84:ce:1f:e8:b8:03: ce:8e:19:18 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUJH9kKBmvQaeRZg/9RMYs9EhuQaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMjMwNTUwMzdaFw0yNDExMjEwNTU1MzdaMDMxMTAvBgNV BAMTKEY5MDBCQzY1RTJCNjQ2RUJBQzQ3MkE1REVBMTJCREIwMDExQUMxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuwmfwykdMXv4oWj0d9Lg1V8XT SrV/9Vhq/e07I7a2mYTMliNcND6qxHALtcNybnyPORtqm98kdQ10LwGgGoCAz2pz 6Kzs2CvKfO4MacxfYcCSMPB/nkQNK/c4X4uhVM71+xqLsSmRnwXpX/eiU2vr0O2r zSvrfeJQM0m3qsf4kiwubpS4YRP3/VDlYeThY3JNu2lnMpcOQnanKSuw9PWQhqd/ 6rk8Q0eIZUolu7dpfN3O2LO+v4JdVikzIX3zWNv95+Lh8eE4Z09MbcOZbzCkvzNn AOVTlj8uk7uFcap4/B7/OeJXtx20B+48HWJQSpuwejMOu+tp7eRW718NGz09AgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5ALxl4rZG66xH Kl3qEr2wARrBIjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFm ZDJiZTRlLzMvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03Mjc4LTQ2Y2YtYWJkMS05OWNk MWZkMmJlNGUvMy9GOTAwQkM2NUUyQjY0NkVCQUM0NzJBNURFQTEyQkRCMDAxMUFD MTIyLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBAEQMGACoKYEA/MA0GCSqG SIb3DQEBCwUAA4IBAQCzK11pYKPODIZpwgfASUcs/Z19o2Fge2/nRJ0956+YmuoR 3pPA6FP5+NDBcyeWGtGVvBrpIrsF1evx8elVvyaUGxdwB+6QxTiAyxJEqoeUL9K/ SVbU1FYAW4++AIBoBjU4l1b9cRw+ivvgpfywGzkOFEbeYjkPhH/Sw/pKu3bc4qmE w7TgDElxcdiO/++a25BOh/EiQSzQzZUSwEGqZ78aOQFOplBvTPIJNYbF+FbleKSp Lmc9I0nUXi7Fzj0oQZh/SAjbKsFqi0pQq3fpzVI901FKYGb0Uh4x7tnho11X1Gi0 OWBBQyCw1UFAfGQtas5NIdXcDo+Ezh/ouAPOjhkY -----END CERTIFICATE-----Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org