$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer (raw, json) Hash identifier: yvdyqIsymLr/pDv1D2vSqnR5cMUoHZS7i5mD/2NUUi0= Subject key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 431AB81DB865864405CC7A97DC8F33684B823F7E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 04 Jul 2025 13:22:40 +0000 Certificate not after: Fri 03 Jul 2026 13:27:40 +0000 Subordinate resources: IP: 2a0a:6040:db00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1a:b8:1d:b8:65:86:44:05:cc:7a:97:dc:8f:33:68:4b:82:3f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 13:22:40 2025 GMT Not After : Jul 3 13:27:40 2026 GMT Subject: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:7c:7f:72:0c:a9:a2:f2:a2:6d:05:4a:2b: 51:92:aa:43:26:9b:3d:37:b2:e7:da:92:31:8f:41: 39:69:03:07:6c:44:09:c3:3d:2d:91:e8:a4:72:3e: 27:57:65:d6:2a:02:7d:e2:d1:78:2b:80:08:b3:7b: 16:c4:f4:06:06:04:56:3d:70:e2:d5:20:8b:87:5a: eb:c5:93:5d:80:14:c3:e5:c7:44:7a:d6:28:55:b3: 46:8d:a1:56:a2:7f:72:17:b0:0a:25:a0:ba:91:9e: 2b:72:75:20:9a:e9:33:7f:65:9d:e3:0a:73:87:d6: 1d:5e:97:ed:d9:e7:dc:43:3e:57:80:a9:9e:0a:3e: 26:f8:4e:1b:50:52:23:05:6e:5d:b1:0f:0d:62:e6: b1:ad:5e:54:ee:fc:19:c5:26:17:5e:9a:65:ae:fa: 48:80:7a:8d:70:a3:cb:a7:e3:c9:87:81:e6:dd:63: d8:77:f1:ca:5e:83:b3:4f:f3:03:59:95:7d:54:aa: 65:6d:41:17:56:26:3f:2d:4e:a4:7d:d6:13:0f:39: bd:35:ec:6e:30:3e:1b:6c:4f:c7:1a:f5:fd:cf:a2: 53:4f:98:cc:a2:f7:ca:5b:f5:85:a5:49:7c:68:e9: 75:ed:36:80:61:af:bb:18:04:a7:db:b1:d3:08:cb: 1b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:db00::/40 Signature Algorithm: sha256WithRSAEncryption a0:41:78:0e:da:e7:fa:7c:01:64:6d:0c:d7:76:c0:9a:bf:8d: f1:46:de:12:4d:1b:ff:66:33:91:22:c6:b9:01:02:04:bf:b7: 61:a3:62:45:f4:6e:df:25:4c:82:f3:4c:9e:c7:52:04:8d:57: 20:55:85:13:51:bf:99:40:cf:5f:80:46:8a:68:64:56:5b:5c: e3:10:a2:cc:8e:52:8d:f7:9e:f2:e3:f2:f9:66:02:01:dd:f1: b3:4c:b2:1f:57:5a:e6:b9:91:61:e7:f9:e1:a9:c0:45:cd:f2: 36:40:6c:a5:d8:18:4f:54:f7:d6:63:fc:93:05:b3:be:ae:09: ea:8f:f1:00:ca:81:42:c7:d8:08:df:06:cc:7b:3d:16:6b:9d: cc:ba:1b:ac:58:8f:93:2c:86:44:9b:57:b6:f6:95:8a:de:37: 63:42:3b:59:67:ba:15:d1:50:8a:2a:c3:77:a6:e4:3e:00:eb: 81:9f:32:20:6e:00:90:0c:6c:83:39:be:39:f3:98:6b:f2:a7: 1a:10:71:f1:c4:ad:64:74:ba:3a:fc:38:b2:43:18:61:e8:0a: 8a:d3:d7:f6:8b:38:b3:eb:cf:eb:83:1d:15:e5:44:b1:90:49: f5:18:ac:44:c2:8a:67:2d:73:cc:1a:f7:11:7b:07:c9:dc:16: 6a:b1:be:66 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUQxq4HbhlhkQFzHqX3I8zaEuCP34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQxMzIyNDBaFw0yNjA3MDMxMzI3NDBaMDMxMTAvBgNV BAMTKDU1M0Q3NjExRUE2QkNFNUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHXx/cgypovKibQVKK1GSqkMm mz03sufakjGPQTlpAwdsRAnDPS2R6KRyPidXZdYqAn3i0XgrgAizexbE9AYGBFY9 cOLVIIuHWuvFk12AFMPlx0R61ihVs0aNoVaif3IXsAoloLqRnitydSCa6TN/ZZ3j CnOH1h1el+3Z59xDPleAqZ4KPib4ThtQUiMFbl2xDw1i5rGtXlTu/BnFJhdemmWu +kiAeo1wo8un48mHgebdY9h38cpeg7NP8wNZlX1UqmVtQRdWJj8tTqR91hMPOb01 7G4wPhtsT8ca9f3PolNPmMyi98pb9YWlSXxo6XXtNoBhr7sYBKfbsdMIyxsNAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVPXYR6mvOXseW aeSx8Uf1nCoO7jAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRm MTdmODVjLzQvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9jMTI4MjcxZS1jMjY5LTQ5NTQtODdkYi1kMTg0 ZGYxN2Y4NWMvNC81NTNENzYxMUVBNkJDRTVFQzc5NjY5RTRCMUYxNDdGNTlDMkEw RUVFLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBA2zANBgkqhkiG9w0BAQsF AAOCAQEAoEF4Dtrn+nwBZG0M13bAmr+N8UbeEk0b/2YzkSLGuQECBL+3YaNiRfRu 3yVMgvNMnsdSBI1XIFWFE1G/mUDPX4BGimhkVltc4xCizI5Sjfee8uPy+WYCAd3x s0yyH1da5rmRYef54anARc3yNkBspdgYT1T31mP8kwWzvq4J6o/xAMqBQsfYCN8G zHs9FmudzLobrFiPkyyGRJtXtvaVit43Y0I7WWe6FdFQiirDd6bkPgDrgZ8yIG4A kAxsgzm+OfOYa/KnGhBx8cStZHS6Ovw4skMYYegKitPX9os4s+vP64MdFeVEsZBJ 9RisRMKKZy1zzBr3EXsHydwWarG+Zg== -----END CERTIFICATE-----Generated at Sat Jul 5 04:33:47 2025 by rpki-client