Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
File:                     0E357DDA04B8107626124F52CFC2439B76D85AF9.cer (raw, json)
Hash identifier:          saU0LHDbW75q428ycYpWEPIvKZg/16AmdhPKNwxkTs0=
Subject key identifier:   0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6DD5AE00847D6660564E2558103E2E93B63DD513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Sun 06 Oct 2024 07:36:54 +0000
Certificate not after:    Sun 05 Oct 2025 07:41:54 +0000
Subordinate resources:    IP: 2a05:dfc1::/32
                          IP: 2a06:9f80::/29
                          IP: 2a0a:6040::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d5:ae:00:84:7d:66:60:56:4e:25:58:10:3e:2e:93:b6:3d:d5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Oct  6 07:36:54 2024 GMT
            Not After : Oct  5 07:41:54 2025 GMT
        Subject: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:d7:da:1e:01:22:cc:94:62:74:eb:6b:30:
                    38:a6:b8:d4:f1:bf:c5:3d:6b:d9:72:06:75:ce:3a:
                    ab:6f:23:a8:b9:af:cd:80:ad:79:ad:13:b1:f4:52:
                    1c:9a:5a:49:d2:fc:56:a5:d0:ad:87:54:35:03:f0:
                    55:bb:c4:43:f5:82:31:25:69:36:ed:2c:36:0e:c7:
                    49:38:01:ff:54:a8:f5:1e:51:ac:b8:f1:e7:5d:53:
                    4a:6f:7b:9f:22:34:c0:ad:6f:e7:16:41:57:04:27:
                    06:14:fb:5d:1b:c0:53:a0:ce:4a:59:d5:ee:73:7b:
                    2c:7c:4b:fb:7c:23:18:61:56:ff:e4:d6:b0:25:d6:
                    9e:44:85:07:14:56:07:b6:c6:5a:2b:52:76:4c:47:
                    3d:9e:60:62:c1:30:68:20:38:16:eb:6b:95:04:e4:
                    cf:62:87:de:26:34:53:46:fd:1c:2b:ed:0b:ae:5d:
                    75:9b:c6:0a:0a:47:cb:95:8b:67:57:b1:d2:17:93:
                    18:bf:79:85:3e:71:94:57:da:b5:08:1a:7f:c6:d5:
                    81:d8:3a:a4:90:24:5c:30:35:f9:e7:31:6d:c6:c6:
                    23:a6:ca:7b:ef:cf:2f:70:cb:4c:71:1f:9c:71:31:
                    c8:ac:a7:e0:07:43:8f:37:9e:71:06:98:c1:10:34:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/32
                  2a06:9f80::/29
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:7a:7c:8b:d8:95:26:a3:2b:3c:73:c4:3d:c0:f8:81:8d:e7:
         95:96:ee:41:65:89:fd:95:05:a8:7f:f5:ac:71:9a:21:5f:ba:
         1d:8c:0a:4d:4e:ab:35:61:bc:71:29:74:93:e1:dd:51:e5:50:
         9a:40:23:0e:aa:fa:f6:93:8e:1d:28:b6:c4:a3:e7:12:a1:2c:
         ed:e4:91:78:bc:1e:0b:bb:d0:63:cb:0c:57:75:75:c7:38:9d:
         d9:98:c0:19:5e:f3:a3:73:a4:02:2d:ae:b6:1d:c6:77:a5:64:
         70:76:8f:f0:d0:f8:b7:89:ae:91:9e:f6:b9:2b:ec:f7:87:c8:
         96:f2:24:21:12:38:20:4b:37:49:88:19:21:13:dd:d9:58:a3:
         0d:86:39:b6:1f:02:5b:da:04:5b:94:ca:90:e9:23:4b:94:a0:
         79:1a:a7:07:36:cc:9e:29:9c:50:f6:a2:15:e5:0e:60:5c:b7:
         0c:bf:fe:57:19:8a:b3:8a:49:95:0f:03:1a:d4:e4:4d:22:8f:
         95:01:54:d3:ca:7c:c0:db:3a:61:b0:95:96:a7:a9:98:1a:16:
         6a:3e:ca:f1:be:53:c9:6b:fd:f9:13:4e:fb:be:d0:6b:56:1a:
         0a:74:50:35:b3:4c:73:37:b6:00:ec:03:7c:28:76:dc:cb:97:
         b8:87:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:42 2024 by rpki-client on console-fra.rpki-client.org