Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
File:                     0E357DDA04B8107626124F52CFC2439B76D85AF9.cer (raw, json)
Hash identifier:          gL+EFmp7ntAN4WGndbBoOcFuCpWcWiz8p7XnVKjvrNg=
Subject key identifier:   0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       46816657A55999D419535C844B215CB833300952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Sun 05 Nov 2023 04:01:57 +0000
Certificate not after:    Sun 03 Nov 2024 04:06:57 +0000
Subordinate resources:    IP: 2a05:dfc1::/32
                          IP: 2a06:9f80::/29
                          IP: 2a0a:6040::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:81:66:57:a5:59:99:d4:19:53:5c:84:4b:21:5c:b8:33:30:09:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 04:01:57 2023 GMT
            Not After : Nov  3 04:06:57 2024 GMT
        Subject: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:d7:da:1e:01:22:cc:94:62:74:eb:6b:30:
                    38:a6:b8:d4:f1:bf:c5:3d:6b:d9:72:06:75:ce:3a:
                    ab:6f:23:a8:b9:af:cd:80:ad:79:ad:13:b1:f4:52:
                    1c:9a:5a:49:d2:fc:56:a5:d0:ad:87:54:35:03:f0:
                    55:bb:c4:43:f5:82:31:25:69:36:ed:2c:36:0e:c7:
                    49:38:01:ff:54:a8:f5:1e:51:ac:b8:f1:e7:5d:53:
                    4a:6f:7b:9f:22:34:c0:ad:6f:e7:16:41:57:04:27:
                    06:14:fb:5d:1b:c0:53:a0:ce:4a:59:d5:ee:73:7b:
                    2c:7c:4b:fb:7c:23:18:61:56:ff:e4:d6:b0:25:d6:
                    9e:44:85:07:14:56:07:b6:c6:5a:2b:52:76:4c:47:
                    3d:9e:60:62:c1:30:68:20:38:16:eb:6b:95:04:e4:
                    cf:62:87:de:26:34:53:46:fd:1c:2b:ed:0b:ae:5d:
                    75:9b:c6:0a:0a:47:cb:95:8b:67:57:b1:d2:17:93:
                    18:bf:79:85:3e:71:94:57:da:b5:08:1a:7f:c6:d5:
                    81:d8:3a:a4:90:24:5c:30:35:f9:e7:31:6d:c6:c6:
                    23:a6:ca:7b:ef:cf:2f:70:cb:4c:71:1f:9c:71:31:
                    c8:ac:a7:e0:07:43:8f:37:9e:71:06:98:c1:10:34:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/32
                  2a06:9f80::/29
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:f6:c8:c1:23:1b:b8:6d:9a:e3:3e:0d:81:ae:af:c1:61:
         2f:66:14:91:48:66:cc:fb:6a:b8:c6:ef:a2:01:c7:a2:ac:c5:
         fa:6a:19:ef:4d:c5:ca:68:bc:89:e2:7b:07:00:be:b1:65:31:
         f9:59:e6:18:25:2a:6a:ac:02:01:00:96:68:40:fe:0b:dc:80:
         97:e2:00:58:16:96:71:4a:2d:ce:0a:c5:60:f4:6d:ce:6a:67:
         f8:08:3d:c6:d9:f3:98:2c:5c:a8:fd:fa:60:56:90:ea:14:2a:
         ec:ed:45:7d:c9:ca:4a:1c:8b:5e:ec:e9:0c:55:df:ed:5e:20:
         a6:32:b3:af:f4:82:17:e7:e4:32:3e:45:a0:83:55:59:44:9a:
         ab:94:34:d9:44:bb:09:44:41:8f:37:84:7c:d0:ee:02:b2:b1:
         9c:1c:77:bb:9d:66:c1:55:83:ad:12:eb:67:e8:c7:f3:12:0b:
         48:50:9f:e9:7e:2b:09:83:b6:2e:55:72:1e:8e:5c:68:b7:4c:
         21:53:2c:7a:5f:38:71:ae:bc:69:4e:c9:9c:7d:85:2f:c6:e3:
         38:b9:fb:05:3d:f6:98:97:5a:33:51:4d:d4:24:d8:29:eb:e0:
         d8:9b:80:6f:34:c6:69:08:97:ed:d5:60:63:7c:6d:20:a8:4a:
         d2:db:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 20:49:01 2024 by rpki-client on console-ams.rpki-client.org