$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.cer File: D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.cer (raw, json) Hash identifier: uGqyRZqVDqX6yQHSrs/O57/nFH0wHAE/h11M2zfDSXY= Subject key identifier: D8:38:B7:15:8B:11:DF:B6:B6:5B:9A:68:DE:B2:5B:46:E4:F5:7E:68 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 359768EF6201FE1B80C6AE92E8B87BAC30D3F41C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Mon 06 Nov 2023 05:33:55 +0000 Certificate not after: Mon 04 Nov 2024 05:38:55 +0000 Subordinate resources: IP: 2a05:dfc1:1000::/40 IP: 2a0a:6040:4b00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Jan 2024 21:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:97:68:ef:62:01:fe:1b:80:c6:ae:92:e8:b8:7b:ac:30:d3:f4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 6 05:33:55 2023 GMT Not After : Nov 4 05:38:55 2024 GMT Subject: CN=D838B7158B11DFB6B65B9A68DEB25B46E4F57E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:76:49:b4:cc:cb:58:9e:50:df:53:8f:b9: 45:1f:63:f9:9e:3d:10:d6:11:53:08:8d:32:67:34: a3:22:96:66:9c:83:7f:6d:46:f9:54:fb:a5:9f:a6: 45:d6:58:19:85:5a:f5:d5:87:3d:8f:f7:ef:02:8d: e3:4f:a7:75:02:8a:16:15:b9:0f:ff:da:16:3a:cd: 91:ab:c5:2c:51:4d:60:18:98:3f:40:e3:39:ca:35: 32:4d:0b:81:4b:a3:06:a6:6b:93:12:df:dc:9a:fd: 00:86:e6:63:ae:39:84:d8:bd:15:58:a4:b5:1e:fa: 0b:f0:2d:60:54:08:33:bb:a8:90:46:bf:59:de:fe: bd:d1:23:12:81:7f:51:35:a5:5d:2f:16:db:f8:be: 61:4a:46:d5:8a:81:1f:9a:d2:1a:1f:e5:f2:a8:86: 53:bf:d9:bd:a7:bf:f5:04:93:75:81:bc:88:3b:ad: 47:e8:88:12:cb:f5:f9:55:42:2a:6f:09:ce:d4:12: 5a:e9:00:f4:65:91:f4:45:5e:20:a7:0e:9d:e2:ab: 25:3a:65:ff:58:80:50:1a:25:8c:ac:39:e6:e2:cb: 21:cc:72:06:05:f7:62:d1:e5:21:f9:17:5b:f0:0e: 98:ab:16:39:29:3b:7e:09:98:e1:41:95:81:d9:a1: f2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:38:B7:15:8B:11:DF:B6:B6:5B:9A:68:DE:B2:5B:46:E4:F5:7E:68 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1000::/40 2a0a:6040:4b00::/40 Signature Algorithm: sha256WithRSAEncryption 26:4e:a6:da:37:05:23:31:11:be:6e:ff:a6:b7:f5:7c:66:92: 47:f5:37:d7:3a:a9:8d:35:76:50:95:fc:54:d3:0b:35:6a:e4: c3:69:b7:83:74:06:c8:5d:7b:cc:20:a5:5a:c0:1d:42:ba:bd: 1c:87:22:7b:e0:5d:a5:7e:b2:24:60:c5:ca:01:3a:5a:51:28: b0:6d:5f:f1:8e:c4:b9:2b:dd:ce:b9:08:23:e4:a8:e4:e5:21: a0:7a:ad:d7:e4:9b:6a:c7:7d:c3:cf:86:56:67:99:1d:6c:87: bc:66:67:4a:ae:99:d2:1a:c9:aa:90:7c:c4:24:94:1b:59:f8: 33:56:17:02:09:bd:87:ed:2e:12:ca:6f:69:b5:d6:13:6c:b1: 32:87:68:db:d9:4d:83:db:cf:dc:d1:44:3a:24:f1:73:39:f6: c8:12:3c:50:32:8e:71:05:1d:79:6d:80:da:bf:08:14:24:0c: bc:d9:05:e2:35:d8:93:19:ef:38:65:76:59:43:12:cc:09:54: 84:17:2b:18:ff:f9:d5:69:ff:1c:5d:2e:b3:72:3e:8f:31:c2: d5:d0:b8:c4:dc:d4:e7:d0:a2:69:b4:7c:4b:af:cb:6e:dc:84: da:35:e8:d2:14:85:84:0c:87:f3:a8:66:1a:bc:5c:64:26:65: 0f:6f:8c:11 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgIUNZdo72IB/huAxq6S6Lh7rDDT9BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDYwNTMzNTVaFw0yNDExMDQwNTM4NTVaMDMxMTAvBgNV BAMTKEQ4MzhCNzE1OEIxMURGQjZCNjVCOUE2OERFQjI1QjQ2RTRGNTdFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+UnZJtMzLWJ5Q31OPuUUfY/me PRDWEVMIjTJnNKMilmacg39tRvlU+6WfpkXWWBmFWvXVhz2P9+8CjeNPp3UCihYV uQ//2hY6zZGrxSxRTWAYmD9A4znKNTJNC4FLowama5MS39ya/QCG5mOuOYTYvRVY pLUe+gvwLWBUCDO7qJBGv1ne/r3RIxKBf1E1pV0vFtv4vmFKRtWKgR+a0hof5fKo hlO/2b2nv/UEk3WBvIg7rUfoiBLL9flVQipvCc7UElrpAPRlkfRFXiCnDp3iqyU6 Zf9YgFAaJYysOebiyyHMcgYF92LR5SH5F1vwDpirFjkpO34JmOFBlYHZofKXAgMB AAGjggLYMIIC1DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYOLcVixHftrZb mmjesltG5PV+aDAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCASMGCCsGAQUFBwEL BIIBFTCCAREwVAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8zLzCB gAYIKwYBBQUHMAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8zL0Q4MzhCNzE1OEIx MURGQjZCNjVCOUE2OERFQjI1QjQ2RTRGNTdFNjgubWZ0MDYGCCsGAQUFBzANhipo dHRwczovL3JyZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMG ACoF38EQAwYAKgpgQEswDQYJKoZIhvcNAQELBQADggEBACZOpto3BSMxEb5u/6a3 9Xxmkkf1N9c6qY01dlCV/FTTCzVq5MNpt4N0Bshde8wgpVrAHUK6vRyHInvgXaV+ siRgxcoBOlpRKLBtX/GOxLkr3c65CCPkqOTlIaB6rdfkm2rHfcPPhlZnmR1sh7xm Z0qumdIayaqQfMQklBtZ+DNWFwIJvYftLhLKb2m11hNssTKHaNvZTYPbz9zRRDok 8XM59sgSPFAyjnEFHXltgNq/CBQkDLzZBeI12JMZ7zhldllDEswJVIQXKxj/+dVp /xxdLrNyPo8xwtXQuMTc1OfQomm0fEuvy27chNo16NIUhYQMh/OoZhq8XGQmZQ9v jBE= -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:25 2024 by rpki-client on console.sobornost.net