Certificate
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer
File: F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.cer (raw, json)
Hash identifier: uVGvsRj9Bb+Dm/HUwHK3uGWvDb68Yqg7CtQEtah8X/Y=
Subject key identifier: F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial: 31C7646BD538B800527A384F106E6FA06F6775D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 12 Oct 2023 13:10:13 +0000
Certificate not after: Thu 10 Oct 2024 13:15:13 +0000
Subordinate resources: IP: 2a0a:6040:a100::/40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c7:64:6b:d5:38:b8:00:52:7a:38:4f:10:6e:6f:a0:6f:67:75:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Validity
Not Before: Oct 12 13:10:13 2023 GMT
Not After : Oct 10 13:15:13 2024 GMT
Subject: CN=F9BEEC0A996497A611BBD137E4EF0B0D574C78D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:8b:ac:ee:e4:e4:dd:f9:e3:74:b2:09:5c:
88:7e:18:bb:ba:51:e6:44:6b:7c:8b:a3:a3:b7:ce:
cc:97:37:66:b2:76:d9:0a:f6:64:ef:6a:1d:17:a8:
43:b3:d7:89:b9:32:cd:0e:b2:26:ea:95:56:5d:17:
9f:eb:33:ee:57:55:9f:f6:aa:e1:00:e7:86:42:f2:
fa:0b:b3:78:a3:58:7f:92:94:4a:34:87:8a:a0:93:
67:f4:76:64:c7:a8:18:48:98:88:a9:f6:42:9c:91:
ed:e7:cd:4b:33:fb:b3:fd:81:ac:ae:04:eb:ce:df:
64:77:ec:23:55:a7:29:a8:d7:93:5f:99:53:45:47:
d1:f5:57:bf:71:93:72:94:ef:8f:53:15:f1:c3:8e:
6f:76:e9:54:f6:39:98:ba:b6:0e:90:99:3d:b6:cb:
e0:60:2a:1e:03:e6:68:3a:fe:b3:da:26:c0:ac:7a:
89:0f:91:fe:1d:fc:be:20:a1:10:39:86:b1:e2:15:
30:65:3d:a1:50:3b:b8:45:c3:47:6f:b9:01:91:ad:
09:f7:e1:d9:9e:25:30:fb:f6:4b:0c:e5:71:cb:c5:
36:18:0b:2b:73:27:af:7e:93:8d:6f:8a:3d:de:3f:
b5:60:80:d8:11:35:17:12:0d:8b:7c:d0:50:0e:65:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F9:BE:EC:0A:99:64:97:A6:11:BB:D1:37:E4:EF:0B:0D:57:4C:78:D3
X509v3 Authority Key Identifier:
keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/2/F9BEEC0A996497A611BBD137E4EF0B0D574C78D3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a100::/40
Signature Algorithm: sha256WithRSAEncryption
1a:f6:d9:5e:ec:4f:82:f8:31:20:40:31:40:d4:77:db:f8:ee:
30:45:04:b5:9f:57:76:0c:68:93:0c:02:36:a6:81:28:ca:c8:
b1:fb:c8:51:71:42:be:90:71:76:34:bd:47:96:99:d3:ae:7d:
e1:39:fd:91:a4:fa:c2:64:4d:64:97:16:33:c4:64:66:77:32:
5d:63:9b:ba:0f:01:1b:30:07:a7:5f:7c:b9:b6:2b:ad:06:d3:
72:95:83:38:89:73:d7:83:14:de:13:8e:51:b6:70:75:84:40:
66:b8:0b:62:54:81:1a:b6:1d:ac:49:f6:72:11:34:d5:42:f3:
ec:50:4d:47:29:ed:7e:65:f5:dc:98:52:db:e4:91:1d:85:51:
d2:5a:bf:00:56:c3:99:f6:8a:88:92:90:ed:80:4f:a3:7c:11:
2b:53:c6:e6:3a:58:bb:bf:cd:9b:42:d5:bd:1c:0b:3d:f0:8c:
20:a6:14:91:3e:22:ec:61:ab:08:57:b3:49:e0:f1:a4:b8:77:
0d:96:57:84:97:5b:f1:3a:43:69:94:f5:01:16:b1:00:29:10:
60:21:cf:7a:0c:55:26:66:6f:26:22:b6:6d:84:ee:46:6d:4c:
4c:cc:00:b0:9e:dd:0e:37:ff:53:24:6f:7b:91:09:cc:33:1c:
ad:07:da:f1
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUMcdka9U4uABSejhPEG5voG9nddcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzEwMTIxMzEwMTNaFw0yNDEwMTAxMzE1MTNaMDMxMTAvBgNV
BAMTKEY5QkVFQzBBOTk2NDk3QTYxMUJCRDEzN0U0RUYwQjBENTc0Qzc4RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NIus7uTk3fnjdLIJXIh+GLu6
UeZEa3yLo6O3zsyXN2aydtkK9mTvah0XqEOz14m5Ms0OsibqlVZdF5/rM+5XVZ/2
quEA54ZC8voLs3ijWH+SlEo0h4qgk2f0dmTHqBhImIip9kKcke3nzUsz+7P9gayu
BOvO32R37CNVpymo15NfmVNFR9H1V79xk3KU749TFfHDjm926VT2OZi6tg6QmT22
y+BgKh4D5mg6/rPaJsCseokPkf4d/L4goRA5hrHiFTBlPaFQO7hFw0dvuQGRrQn3
4dmeJTD79ksM5XHLxTYYCytzJ69+k41vij3eP7VggNgRNRcSDYt80FAOZbq5AgMB
AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5vuwKmWSXphG7
0Tfk7wsNV0x40zAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV
HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl
cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2
MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw
gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0
QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL
BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvMzliMjI2ZTItNzUxMi00YmFiLWJlYzMtMTNlNDUz
YWJjMmI3LzIvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS8zOWIyMjZlMi03NTEyLTRiYWItYmVjMy0xM2U0
NTNhYmMyYjcvMi9GOUJFRUMwQTk5NjQ5N0E2MTFCQkQxMzdFNEVGMEIwRDU3NEM3
OEQzLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl
Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAoTANBgkqhkiG9w0BAQsF
AAOCAQEAGvbZXuxPgvgxIEAxQNR32/juMEUEtZ9XdgxokwwCNqaBKMrIsfvIUXFC
vpBxdjS9R5aZ06594Tn9kaT6wmRNZJcWM8RkZncyXWObug8BGzAHp198ubYrrQbT
cpWDOIlz14MU3hOOUbZwdYRAZrgLYlSBGrYdrEn2chE01ULz7FBNRyntfmX13JhS
2+SRHYVR0lq/AFbDmfaKiJKQ7YBPo3wRK1PG5jpYu7/Nm0LVvRwLPfCMIKYUkT4i
7GGrCFezSeDxpLh3DZZXhJdb8TpDaZT1ARaxACkQYCHPegxVJmZvJiK2bYTuRm1M
TMwAsJ7dDjf/UyRve5EJzDMcrQfa8Q==
-----END CERTIFICATE-----
Generated at Sun Nov 5 03:48:32 2023 by rpki-client on console-ams.rpki-client.org