Attachment 618205 Details for Bug 860117 – Verifying screen log

Verifying screen log

log (text/plain), 129.98 KB, created by mkovacik on 2012-09-27 17:10:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: mkovacik

Created: 2012-09-27 17:10:56 UTC

Size: 129.98 KB

patch

obsolete

>[root@rhua ~]# reset
>
>[root@rhua ~]# rhui-manager
>
>------------------------------------------------------------------------------
>             -= Red Hat Update Infrastructure Management Tool =-
>
>
>-= Home =-
>
>   r   manage repositories
>   c   manage content delivery servers (CDS)
>   s   synchronization status and scheduling
>   e   create entitlement certificates and client configuration RPMs
>   n   manage Red Hat entitlement certificates
>   u   manage users
>   i   manage identity certificate
>
>   logout
>       removes stored authentication credentials and exits
>
>   <   move to the previous screen
>   ^, home
>       move to the home screen
>   /, clear
>       clears the screen
>   ?, help
>       display help
>   q, quit, exit
>       exit
>
>                                                   Connected: rhua.example.com
>------------------------------------------------------------------------------
>rhui (home) => r
>
>------------------------------------------------------------------------------
>             -= Red Hat Update Infrastructure Management Tool =-
>
>
>-= Repository Management =-
>
>   l   list repositories currently managed by the RHUI
>   i   display detailed information on a repository
>   a   add a new Red Hat content repository
>   c   create a new custom repository
>   d   delete a repository from the RHUI
>   u   upload content to a custom repository
>   p   list packages in a repository
>
>                                                   Connected: rhua.example.com
>------------------------------------------------------------------------------
>rhui (repo) => i
>
>Select one or more repositories:
>
>  Custom Repositories
>    -  1 : client-all-i386
>    -  2 : client-all-x86_64
>    -  3 : client-rhel5-i386
>    -  4 : client-rhel5-x86_64
>    -  5 : client-rhel6-i386
>    -  6 : client-rhel6-x86_64
>    -  7 : client-rhui-x86_64
>    -  8 : cluster-1-a-i386
>    -  9 : cluster-1-a-x86_64
>    -  10: cluster-1-b-x86_64
>    -  11: cluster-2-a-i386
>    -  12: cluster-2-a-x86_64
>    -  13: cluster-2-b-x86_64
>
>  Red Hat Repositories
>    -  14: Red Hat Enterprise Linux 6 Server from RHUI (RPMs) (6Server-x86_64)
>    -  15: Red Hat Update Infrastructure 2 (RPMs) (6Server-x86_64)
>
>Enter value (1-15) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1-15
>
>Select one or more repositories:
>
>  Custom Repositories
>    x  1 : client-all-i386
>    x  2 : client-all-x86_64
>    x  3 : client-rhel5-i386
>    x  4 : client-rhel5-x86_64
>    x  5 : client-rhel6-i386
>    x  6 : client-rhel6-x86_64
>    x  7 : client-rhui-x86_64
>    x  8 : cluster-1-a-i386
>    x  9 : cluster-1-a-x86_64
>    x  10: cluster-1-b-x86_64
>    x  11: cluster-2-a-i386
>    x  12: cluster-2-a-x86_64
>    x  13: cluster-2-b-x86_64
>
>  Red Hat Repositories
>    x  14: Red Hat Enterprise Linux 6 Server from RHUI (RPMs) (6Server-x86_64)
>    x  15: Red Hat Update Infrastructure 2 (RPMs) (6Server-x86_64)
>
>Enter value (1-15) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name:                client-all-i386
>Type:                Custom
>Relative Path:       client/all/i386
>Entitlement Path:    client/all/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                client-all-x86_64
>Type:                Custom
>Relative Path:       client/all/x86_64
>Entitlement Path:    client/all/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                client-rhel5-i386
>Type:                Custom
>Relative Path:       client/rhel5/i386
>Entitlement Path:    client/rhel5/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                client-rhel5-x86_64
>Type:                Custom
>Relative Path:       client/rhel5/x86_64
>Entitlement Path:    client/rhel5/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                client-rhel6-i386
>Type:                Custom
>Relative Path:       client/rhel6/i386
>Entitlement Path:    client/rhel6/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                client-rhel6-x86_64
>Type:                Custom
>Relative Path:       client/rhel6/x86_64
>Entitlement Path:    client/rhel6/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                client-rhui-x86_64
>Type:                Custom
>Relative Path:       client/rhui/x86_64
>Entitlement Path:    client/rhui/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                cluster-1-a-i386
>Type:                Custom
>Relative Path:       cluster-1-a/i386
>Entitlement Path:    cluster-1-a/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                cluster-1-a-x86_64
>Type:                Custom
>Relative Path:       cluster-1-a/x86_64
>Entitlement Path:    cluster-1-a/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                cluster-1-b-x86_64
>Type:                Custom
>Relative Path:       cluster-1-b-x86_64
>Entitlement Path:    cluster-1-b-$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                cluster-2-a-i386
>Type:                Custom
>Relative Path:       cluster-2-a/i386
>Entitlement Path:    cluster-2-a/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                cluster-2-a-x86_64
>Type:                Custom
>Relative Path:       cluster-2-a/x86_64
>Entitlement Path:    cluster-2-a/$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                cluster-2-b-x86_64
>Type:                Custom
>Relative Path:       cluster-2-b-x86_64
>Entitlement Path:    cluster-2-b-$basearch
>GPG Check:           No
>Package Count:       0
>
>Name:                Red Hat Enterprise Linux 6 Server from RHUI (RPMs) (6Server-x86_64)
>Type:                Red Hat
>Relative Path:       content/dist/rhel/rhui/server/6/6Server/x86_64/os
>Package Count:       8570
>Last Sync:           09-27-2012 10:38
>Next Sync:           09-27-2012 16:26
>
>Name:                Red Hat Update Infrastructure 2 (RPMs) (6Server-x86_64)
>Type:                Red Hat
>Relative Path:       content/dist/rhel/rhui/server/6/6Server/x86_64/rhui/2/os
>Package Count:       41
>Last Sync:           09-27-2012 10:26
>Next Sync:           09-27-2012 16:26
>
>
>------------------------------------------------------------------------------
>rhui (repo) => <
>
>------------------------------------------------------------------------------
>             -= Red Hat Update Infrastructure Management Tool =-
>
>
>-= Home =-
>
>   r   manage repositories
>   c   manage content delivery servers (CDS)
>   s   synchronization status and scheduling
>   e   create entitlement certificates and client configuration RPMs
>   n   manage Red Hat entitlement certificates
>   u   manage users
>   i   manage identity certificate
>
>                                                   Connected: rhua.example.com
>------------------------------------------------------------------------------
>rhui (home) => c
>
>------------------------------------------------------------------------------
>             -= Red Hat Update Infrastructure Management Tool =-
>
>
>-= Content Delivery Server (CDS) Management =-
>
>   l   list all CDS clusters and instances managed by the RHUI
>   i   display detailed information on a CDS cluster
>   a   register (add) a new CDS instance
>   m   move CDS(s) to a different cluster
>   d   unregister (delete) a CDS instance from the RHUI
>   s   associate a repository with a CDS cluster
>   u   unassociate a repository from a CDS cluster
>
>                                                   Connected: rhua.example.com
>------------------------------------------------------------------------------
>rhui (cds) => i
>
>Select one or more CDS clusters:
>
>  -  1 : cluster-1
>  -  2 : cluster-2
>Enter value (1-2) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1-2
>
>Select one or more CDS clusters:
>
>  x  1 : cluster-1
>  x  2 : cluster-2
>Enter value (1-2) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>-= RHUI CDS Clusters =-
>
>  cluster-1
>  ---------
>
>    CDS Instances
>    -------------
>    cds.example.com
>      hostname:        cds.example.com
>      client hostname: cds.example.com
>
>    Repositories
>    ------------
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs) (6Server-x86_64)
>    Red Hat Update Infrastructure 2 (RPMs) (6Server-x86_64)
>    client-all-i386
>    client-all-x86_64
>    client-rhel5-i386
>    client-rhel5-x86_64
>    client-rhel6-i386
>    client-rhel6-x86_64
>    client-rhui-x86_64
>    cluster-1-a-i386
>    cluster-1-a-x86_64
>    cluster-1-b-x86_64
>
>
>  cluster-2
>  ---------
>
>    CDS Instances
>    -------------
>    cdt.example.com
>      hostname:        cdt.example.com
>      client hostname: cdt.example.com
>
>    Repositories
>    ------------
>    cluster-2-a-i386
>    cluster-2-a-x86_64
>    cluster-2-b-x86_64
>    client-all-i386
>    client-all-x86_64
>    client-rhel5-i386
>    client-rhel5-x86_64
>    client-rhel6-i386
>    client-rhel6-x86_64
>    client-rhui-x86_64
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs) (6Server-x86_64)
>    Red Hat Update Infrastructure 2 (RPMs) (6Server-x86_64)
>
>
>
>
>------------------------------------------------------------------------------
>rhui (cds) => <
>
>------------------------------------------------------------------------------
>             -= Red Hat Update Infrastructure Management Tool =-
>
>
>-= Home =-
>
>   r   manage repositories
>   c   manage content delivery servers (CDS)
>   s   synchronization status and scheduling
>   e   create entitlement certificates and client configuration RPMs
>   n   manage Red Hat entitlement certificates
>   u   manage users
>   i   manage identity certificate
>
>                                                   Connected: rhua.example.com
>------------------------------------------------------------------------------
>rhui (home) => e
>
>------------------------------------------------------------------------------
>             -= Red Hat Update Infrastructure Management Tool =-
>
>
>-= Client Entitlement Management =-
>
>   e   generate an entitlement certificate
>   c   create a client configuration RPM from an entitlement certificate
>
>                                                   Connected: rhua.example.com
>------------------------------------------------------------------------------
>rhui (client) => e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 1
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 7-8
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    x  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c1-01
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    Red Hat Update Infrastructure 2 (RPMs)
>
>Proceed? (y/n) y
>
>.............+++
>.................................................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c1-01.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c1-01.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 271 (0x10f)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:12:39 2012 GMT
>            Not After : Sep 27 16:12:39 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:ae:9e:81:40:e7:7a:02:77:a5:50:dc:f8:52:87:
>                    dd:f8:64:c5:ee:eb:7b:ad:65:80:d3:ca:b2:ee:a8:
>                    ac:bf:e1:28:11:dd:ed:79:39:1d:f0:39:75:f0:40:
>                    78:4b:03:d3:5b:27:46:d5:4d:be:9f:52:d4:e6:e2:
>                    9f:cc:e2:76:fe:04:83:64:94:a0:1a:b3:b1:8b:e2:
>                    50:9b:61:24:a1:13:b2:0b:4f:0c:a9:fb:b0:31:8f:
>                    7b:5c:be:bb:f4:9a:56:30:13:79:88:31:ff:f2:34:
>                    93:da:c8:99:23:5e:1e:3b:85:04:8e:35:a8:39:08:
>                    79:52:76:76:fb:90:df:b2:51:ce:25:0b:9a:94:c0:
>                    fe:4c:07:94:1b:bf:48:e5:f2:68:4d:b6:2c:a2:75:
>                    0e:fe:bd:42:e3:f0:66:d8:b1:65:00:2a:ed:1b:42:
>                    53:25:28:be:10:42:c7:c1:89:5e:62:36:fa:74:f5:
>                    7a:5b:98:1d:08:85:d2:97:d9:1d:a1:70:92:40:e2:
>                    c7:c5:ec:8d:9d:3e:a4:fe:11:e4:77:17:97:05:42:
>                    30:40:98:5a:0a:39:ab:26:97:6b:85:f5:53:91:13:
>                    51:3d:d2:40:e6:3b:70:07:f9:10:46:3e:f0:7c:3e:
>                    a3:76:78:6f:9f:65:29:15:d1:0c:8c:be:3d:80:34:
>                    72:e3
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.1029.1.1:
>                .2Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>            1.3.6.1.4.1.2312.9.2.1029.1.2:
>                ..rhel-6-server-rhui-rpms
>            1.3.6.1.4.1.2312.9.2.1029.1.6:
>                .9/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
>            1.3.6.1.4.1.2312.9.2.1074.1.1:
>                .&Red Hat Update Infrastructure 2 (RPMs)
>            1.3.6.1.4.1.2312.9.2.1074.1.2:
>                ..rhel-x86_64-6-rhui-2-rpms
>            1.3.6.1.4.1.2312.9.2.1074.1.6:
>                .@/content/dist/rhel/rhui/server/6/$releasever/$basearch/rhui/2/os
>    Signature Algorithm: sha1WithRSAEncryption
>        1b:8e:1e:92:bf:eb:af:14:f1:b6:0e:73:3f:cb:7e:71:f1:27:
>        46:ed:b4:c8:42:e3:cb:a9:ba:84:2c:d7:07:78:8e:73:d6:28:
>        f6:36:ec:1d:69:b7:41:58:da:b6:3c:e7:59:eb:8a:c8:0d:6f:
>        01:17:57:07:60:b9:e8:88:1c:34:ba:01:8f:33:e5:ef:e1:0c:
>        1c:45:d3:c5:02:74:2b:a8:70:32:40:d0:7d:41:ca:6a:e5:34:
>        3a:e6:c2:a6:1d:61:5d:9d:b8:bd:d0:0e:44:f1:38:20:33:d6:
>        85:fa:85:55:0d:53:bf:49:87:9a:fc:ea:eb:da:32:c0:20:87:
>        8b:ac:16:4f:9d:b5:de:94:15:6f:49:c0:48:93:90:c9:63:e9:
>        31:b9:b2:61:ae:0d:01:68:83:c4:dd:40:91:ec:0f:4e:5b:2b:
>        68:48:97:9b:c3:2d:53:ef:cb:3f:ad:e2:23:95:d5:a1:32:15:
>        53:2a:9d:43:c4:95:dd:d7:70:e0:a1:9f:0f:20:5b:8d:a1:b3:
>        29:8f:1d:96:c9:d5:41:ef:e5:f3:9c:21:b0:43:08:ec:f5:a6:
>        b1:c6:df:ee:b2:a7:03:d8:53:54:39:8c:f0:c2:fc:09:45:fa:
>        b5:e9:16:b5:99:6f:0b:10:04:3d:18:26:cf:38:77:69:08:93:
>        18:36:a3:e2
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 1
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1-8
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    x  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    x  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    x  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    x  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    x  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    x  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c1-02
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhui/$basearch
>    cluster-1-a/$basearch
>    client/all/$basearch
>    client/rhel6/$basearch
>    client/rhel5/$basearch
>    cluster-1-b-$basearch
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    Red Hat Update Infrastructure 2 (RPMs)
>
>Proceed? (y/n) y
>
>.....................+++
>.......................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c1-02.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c1-02.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 272 (0x110)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:34:38 2012 GMT
>            Not After : Sep 27 16:34:38 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:eb:7d:5a:e5:46:2b:83:15:a0:bf:79:e9:9d:0e:
>                    1f:3f:f6:f4:44:32:58:d1:90:9f:79:5a:5c:4c:40:
>                    44:9a:d5:0c:3a:68:d2:f9:f3:a3:a1:57:1d:95:69:
>                    c5:c8:95:0b:90:e8:44:a3:7e:19:ca:07:a6:8b:fa:
>                    c4:77:dd:cc:79:4e:1e:77:eb:33:d7:6c:c9:4c:ec:
>                    c8:c8:06:46:ba:20:ec:7c:ef:06:ee:c5:c7:04:f2:
>                    7c:cf:1c:4d:18:18:67:53:88:87:1b:27:64:0d:1f:
>                    c5:d2:f2:10:4b:e4:18:4e:9e:1b:b2:a2:c4:3d:10:
>                    d9:e0:7d:d9:07:fd:0a:a7:1a:82:6c:4c:d5:79:38:
>                    7b:7c:aa:db:ef:4d:ca:10:91:00:71:ae:48:01:3f:
>                    1d:87:10:7c:51:cd:32:7c:51:22:c9:c5:a5:1b:f3:
>                    de:2f:f7:43:d7:2c:e2:7c:fd:17:c5:e9:ce:aa:18:
>                    ab:b2:91:f4:4c:10:ee:e0:cc:aa:ae:33:b7:a1:bd:
>                    38:91:3e:b3:43:4c:4d:de:20:6b:63:47:eb:b3:87:
>                    51:b0:4a:b4:9b:03:85:08:a5:5b:c2:a2:43:0a:4e:
>                    91:9f:0a:6d:c9:2f:3a:a3:d9:b2:40:f9:15:9a:89:
>                    c7:c4:2e:fb:04:19:17:45:fa:99:ee:9a:40:d3:c9:
>                    ec:4f
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10000.1.1:
>                ..Custom Repositories - 10000
>            1.3.6.1.4.1.2312.9.2.10000.1.2:
>                ..custom-10000
>            1.3.6.1.4.1.2312.9.2.10000.1.6:
>                ..client/rhui/$basearch
>            1.3.6.1.4.1.2312.9.2.10001.1.1:
>                ..Custom Repositories - 10001
>            1.3.6.1.4.1.2312.9.2.10001.1.2:
>                ..custom-10001
>            1.3.6.1.4.1.2312.9.2.10001.1.6:
>                ..cluster-1-a/$basearch
>            1.3.6.1.4.1.2312.9.2.10003.1.1:
>                ..Custom Repositories - 10003
>            1.3.6.1.4.1.2312.9.2.10003.1.2:
>                ..custom-10003
>            1.3.6.1.4.1.2312.9.2.10003.1.6:
>                ..client/all/$basearch
>            1.3.6.1.4.1.2312.9.2.10004.1.1:
>                ..Custom Repositories - 10004
>            1.3.6.1.4.1.2312.9.2.10004.1.2:
>                ..custom-10004
>            1.3.6.1.4.1.2312.9.2.10004.1.6:
>                ..client/rhel6/$basearch
>            1.3.6.1.4.1.2312.9.2.10006.1.1:
>                ..Custom Repositories - 10006
>            1.3.6.1.4.1.2312.9.2.10006.1.2:
>                ..custom-10006
>            1.3.6.1.4.1.2312.9.2.10006.1.6:
>                ..client/rhel5/$basearch
>            1.3.6.1.4.1.2312.9.2.10007.1.1:
>                ..Custom Repositories - 10007
>            1.3.6.1.4.1.2312.9.2.10007.1.2:
>                ..custom-10007
>            1.3.6.1.4.1.2312.9.2.10007.1.6:
>                ..cluster-1-b-$basearch
>            1.3.6.1.4.1.2312.9.2.1029.1.1:
>                .2Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>            1.3.6.1.4.1.2312.9.2.1029.1.2:
>                ..rhel-6-server-rhui-rpms
>            1.3.6.1.4.1.2312.9.2.1029.1.6:
>                .9/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
>            1.3.6.1.4.1.2312.9.2.1074.1.1:
>                .&Red Hat Update Infrastructure 2 (RPMs)
>            1.3.6.1.4.1.2312.9.2.1074.1.2:
>                ..rhel-x86_64-6-rhui-2-rpms
>            1.3.6.1.4.1.2312.9.2.1074.1.6:
>                .@/content/dist/rhel/rhui/server/6/$releasever/$basearch/rhui/2/os
>    Signature Algorithm: sha1WithRSAEncryption
>        8e:6a:c1:e8:b9:a7:36:1c:31:1f:74:70:82:68:c0:34:49:68:
>        d9:fb:2d:55:c6:f5:45:53:1e:51:08:f5:bc:b9:bc:0a:2f:85:
>        8b:22:7d:41:dd:89:dd:24:04:ed:b8:99:98:46:1e:9b:0d:e7:
>        6a:df:64:d5:0f:5a:91:11:4f:e9:df:a0:43:18:82:c3:4b:e2:
>        81:b1:bb:9b:63:0f:77:a9:94:a9:48:f9:6c:3f:33:76:67:59:
>        bb:36:45:34:06:7f:4f:b9:06:98:60:6e:b5:f1:64:c1:2d:bd:
>        26:c2:02:6f:60:ec:9a:55:5b:f3:f9:59:1f:d9:d8:8a:e5:7e:
>        46:ea:50:cc:b7:e2:d4:b9:08:f5:a3:dd:5a:5b:aa:af:e2:f1:
>        3a:72:2d:ab:1d:27:55:39:48:a0:57:9b:bf:6d:93:41:1d:31:
>        62:03:d3:fa:1e:2a:86:b4:9c:cd:6d:e7:4c:1e:c8:4d:c3:f4:
>        0d:81:b3:41:f7:71:1d:b5:1d:01:66:89:ab:e2:77:a7:40:77:
>        7d:86:16:e6:82:2d:ce:18:cc:22:cc:0e:56:14:99:0d:25:ae:
>        43:27:a0:5e:e0:d9:e0:e6:23:12:81:a9:38:a0:11:b7:3b:b6:
>        32:b0:6d:52:8c:fc:5c:44:e1:7f:1f:fd:3c:75:6e:4e:5c:4d:
>        33:a2:ad:e6
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 1
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1-6
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    x  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    x  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    x  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    x  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    x  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c1-03
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhui/$basearch
>    cluster-1-a/$basearch
>    client/all/$basearch
>    client/rhel6/$basearch
>    client/rhel5/$basearch
>    cluster-1-b-$basearch
>
>Proceed? (y/n) y
>
>.......................................+++
>........................................................................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c1-03.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl -in /tmp/t0/c1-03.crt -noout -text
>openssl:Error: '-in' is an invalid command.
>
>Standard commands
>asn1parse         ca                ciphers           cms
>crl               crl2pkcs7         dgst              dh
>dhparam           dsa               dsaparam          enc
>engine            errstr            gendh             gendsa
>genpkey           genrsa            nseq              ocsp
>passwd            pkcs12            pkcs7             pkcs8
>pkey              pkeyparam         pkeyutl           prime
>rand              req               rsa               rsautl
>s_client          s_server          s_time            sess_id
>smime             speed             spkac             ts
>verify            version           x509
>
>Message Digest commands (see the `dgst' command for more details)
>md2               md4               md5               rmd160
>sha               sha1
>
>Cipher commands (see the `enc' command for more details)
>aes-128-cbc       aes-128-ecb       aes-192-cbc       aes-192-ecb
>aes-256-cbc       aes-256-ecb       base64            bf
>bf-cbc            bf-cfb            bf-ecb            bf-ofb
>camellia-128-cbc  camellia-128-ecb  camellia-192-cbc  camellia-192-ecb
>camellia-256-cbc  camellia-256-ecb  cast              cast-cbc
>cast5-cbc         cast5-cfb         cast5-ecb         cast5-ofb
>des               des-cbc           des-cfb           des-ecb
>des-ede           des-ede-cbc       des-ede-cfb       des-ede-ofb
>des-ede3          des-ede3-cbc      des-ede3-cfb      des-ede3-ofb
>des-ofb           des3              desx              rc2
>rc2-40-cbc        rc2-64-cbc        rc2-cbc           rc2-cfb
>rc2-ecb           rc2-ofb           rc4               rc4-40
>seed              seed-cbc          seed-cfb          seed-ecb
>seed-ofb          zlib
>
>[root@rhua ~]# openssl x509 -in /tmp/t0/c1-03.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 273 (0x111)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:37:04 2012 GMT
>            Not After : Sep 27 16:37:04 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:d9:9e:6c:2a:27:a0:04:78:ab:fe:f1:cd:0d:0c:
>                    bc:3c:68:e4:16:8b:a4:91:94:99:95:e9:08:27:c2:
>                    bf:1c:d6:f1:3b:3c:a3:a1:19:93:7c:5b:02:ed:e0:
>                    60:73:6c:bb:5f:d3:6e:be:49:7c:87:27:1b:9a:56:
>                    9a:d1:9a:09:cd:d9:25:13:41:5a:8a:cc:df:67:a4:
>                    a9:e7:a5:4c:1a:9f:a7:25:bb:dd:37:8c:af:b1:f8:
>                    ba:24:00:d8:6b:c7:cd:ff:9b:be:2e:98:2f:30:a9:
>                    f7:bd:3b:de:c6:da:31:31:cd:20:ac:2e:27:d2:92:
>                    99:79:b4:fd:80:17:50:28:4b:6a:df:d9:3e:cd:c2:
>                    22:e7:a7:97:3f:c3:a6:be:9d:ae:24:33:3c:59:3b:
>                    f8:8f:f6:20:ed:f1:af:1a:bf:6e:09:ec:e5:77:c5:
>                    43:92:7c:8b:c7:6c:59:7d:4d:02:f2:ee:e4:93:f7:
>                    0d:63:0c:8f:7d:8c:84:89:46:4f:87:07:bf:73:68:
>                    53:4c:08:38:c4:02:79:11:93:98:0d:18:aa:4f:5e:
>                    22:20:7c:06:b8:40:ab:c6:19:14:eb:f2:2f:bc:ae:
>                    be:87:cc:45:09:65:70:07:9f:87:d4:d9:bb:04:d5:
>                    55:58:43:24:52:4d:6d:a3:e0:26:85:7f:a4:d9:de:
>                    22:ad
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10000.1.1:
>                ..Custom Repositories - 10000
>            1.3.6.1.4.1.2312.9.2.10000.1.2:
>                ..custom-10000
>            1.3.6.1.4.1.2312.9.2.10000.1.6:
>                ..client/rhui/$basearch
>            1.3.6.1.4.1.2312.9.2.10001.1.1:
>                ..Custom Repositories - 10001
>            1.3.6.1.4.1.2312.9.2.10001.1.2:
>                ..custom-10001
>            1.3.6.1.4.1.2312.9.2.10001.1.6:
>                ..cluster-1-a/$basearch
>            1.3.6.1.4.1.2312.9.2.10003.1.1:
>                ..Custom Repositories - 10003
>            1.3.6.1.4.1.2312.9.2.10003.1.2:
>                ..custom-10003
>            1.3.6.1.4.1.2312.9.2.10003.1.6:
>                ..client/all/$basearch
>            1.3.6.1.4.1.2312.9.2.10004.1.1:
>                ..Custom Repositories - 10004
>            1.3.6.1.4.1.2312.9.2.10004.1.2:
>                ..custom-10004
>            1.3.6.1.4.1.2312.9.2.10004.1.6:
>                ..client/rhel6/$basearch
>            1.3.6.1.4.1.2312.9.2.10006.1.1:
>                ..Custom Repositories - 10006
>            1.3.6.1.4.1.2312.9.2.10006.1.2:
>                ..custom-10006
>            1.3.6.1.4.1.2312.9.2.10006.1.6:
>                ..client/rhel5/$basearch
>            1.3.6.1.4.1.2312.9.2.10007.1.1:
>                ..Custom Repositories - 10007
>            1.3.6.1.4.1.2312.9.2.10007.1.2:
>                ..custom-10007
>            1.3.6.1.4.1.2312.9.2.10007.1.6:
>                ..cluster-1-b-$basearch
>    Signature Algorithm: sha1WithRSAEncryption
>        61:9f:ed:f9:77:9c:59:f0:6b:39:1e:57:01:73:11:a0:46:9f:
>        66:5d:db:67:8f:86:7e:97:7a:f4:05:f5:90:f1:2c:af:45:ab:
>        d1:21:70:82:ad:9c:7a:ab:22:36:c6:e7:50:2e:22:85:9b:13:
>        1e:a9:2e:2c:ef:25:51:d9:5c:c5:3b:aa:06:17:74:a2:5d:09:
>        29:5a:9f:ae:27:11:5e:41:2a:d3:2f:da:6b:2c:63:c1:d2:ec:
>        5c:35:8d:e3:bf:0b:d7:48:4b:3a:bf:2f:4d:e5:12:20:a3:ef:
>        97:09:cf:12:53:3e:3d:8d:3d:32:54:e9:58:dc:61:e5:df:8e:
>        57:09:a7:98:1f:86:08:ff:68:83:a0:92:7b:dc:56:ae:8a:f9:
>        6a:da:bc:03:4b:ca:bc:b6:e7:d8:51:3e:75:cd:ab:06:19:6c:
>        44:72:18:88:37:67:6c:72:a6:ad:f2:80:dd:5c:4f:10:58:74:
>        6b:74:74:af:f3:c1:3f:05:f1:6e:99:00:a2:eb:4a:89:2e:c2:
>        c8:e9:88:10:62:c0:16:ab:05:ae:39:7b:10:d3:d5:3b:9c:ab:
>        3c:bb:79:0a:59:ee:52:a7:4f:e0:5f:0e:db:34:b2:5e:67:bb:
>        2c:f0:2f:ca:ae:41:ca:6c:bb:48:6f:07:59:38:f9:9a:45:00:
>        07:b0:ce:45
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 1
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1-2
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    x  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c1-04
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhui/$basearch
>    cluster-1-a/$basearch
>
>Proceed? (y/n) y
>
>..+++
>.................................................................................................................................................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c1-04.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# opensll x509 -in /tmp/t0/c1-04.crt -noout -text
>-bash: opensll: command not found
>[root@rhua ~]# openssl x509 -in /tmp/t0/c1-04.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 274 (0x112)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:39:17 2012 GMT
>            Not After : Sep 27 16:39:17 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:c6:94:b0:75:a9:0c:d2:16:e1:59:1c:6f:61:1d:
>                    3d:53:00:62:7a:94:ea:47:50:d3:12:d3:c7:c4:a9:
>                    a0:e4:62:9a:40:15:e8:d0:f7:1f:b4:a2:90:f8:b5:
>                    ca:dd:b5:3f:1f:fe:f3:4a:7e:5e:b7:19:31:c7:46:
>                    4c:2e:44:e3:64:b6:63:79:4e:7f:61:cc:41:72:ac:
>                    21:1d:b7:fd:46:b9:42:ec:b1:10:79:bc:c4:3a:e7:
>                    f3:35:dc:3f:3a:e1:39:7b:6c:74:44:8e:19:9a:de:
>                    c7:b1:45:08:16:03:66:31:15:68:be:e8:f7:e2:0e:
>                    58:75:8d:bb:4b:07:84:77:f5:cd:6b:1d:26:18:08:
>                    9d:7a:96:08:73:de:18:5b:f4:17:e8:85:a1:7b:50:
>                    55:2f:9c:e6:c1:c9:3d:18:ae:80:83:d8:2c:b9:85:
>                    06:d5:fe:a5:c5:7f:77:2b:80:0b:36:3d:c3:ca:2c:
>                    f0:a9:05:f1:81:bf:e1:b9:21:89:56:cc:4b:00:a4:
>                    f6:08:8e:e4:be:7d:9e:b2:4e:e1:e9:47:98:91:2a:
>                    97:75:bf:e7:7a:83:96:a3:53:4e:98:79:6a:a6:33:
>                    8b:9c:30:bc:b2:b2:da:2b:2b:e1:b3:46:a9:f8:17:
>                    2e:9f:c1:80:51:ad:15:75:2d:b6:ff:71:ef:cf:ca:
>                    5d:9d
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10000.1.1:
>                ..Custom Repositories - 10000
>            1.3.6.1.4.1.2312.9.2.10000.1.2:
>                ..custom-10000
>            1.3.6.1.4.1.2312.9.2.10000.1.6:
>                ..client/rhui/$basearch
>            1.3.6.1.4.1.2312.9.2.10001.1.1:
>                ..Custom Repositories - 10001
>            1.3.6.1.4.1.2312.9.2.10001.1.2:
>                ..custom-10001
>            1.3.6.1.4.1.2312.9.2.10001.1.6:
>                ..cluster-1-a/$basearch
>    Signature Algorithm: sha1WithRSAEncryption
>        51:78:85:53:99:1d:1a:2c:ce:6e:31:ca:3d:77:ea:30:fe:7d:
>        ad:55:87:88:09:fe:12:68:74:ce:85:43:c5:be:69:20:d7:2f:
>        4e:b0:fa:30:de:97:25:a3:0b:a6:f6:0b:85:f9:15:f4:e5:f8:
>        77:a8:15:29:bd:88:56:d0:39:c4:6c:4e:ba:53:99:c2:5f:6c:
>        e2:33:74:68:54:01:02:f8:bc:7d:35:6b:5e:64:d5:05:c0:f6:
>        42:05:70:bf:f2:5f:54:fe:55:99:6c:99:f8:7c:6a:78:0d:64:
>        f7:40:65:d6:2a:16:22:1f:2c:db:cf:98:42:20:0f:80:80:a6:
>        84:5c:df:ab:5f:f3:26:65:2c:41:da:8f:a5:a0:48:76:c7:10:
>        38:a7:24:6e:c3:bf:2c:50:e5:b3:2a:bb:20:f5:f9:4b:6e:c9:
>        bd:4f:13:df:0e:d7:6b:7f:c8:16:ce:d3:42:12:61:39:6c:06:
>        bc:31:e6:16:49:28:3f:d5:43:d4:a3:0d:02:f3:b9:20:8e:4e:
>        9a:ca:e8:9e:8f:db:7a:da:3d:c9:f0:2b:d8:e2:8c:2e:f5:eb:
>        cd:9a:ac:d5:d7:5c:b0:c0:8a:c2:6c:7b:80:52:8d:b7:0f:69:
>        37:e4:47:c2:f0:f7:f4:f0:8e:6e:d3:8e:a5:24:19:63:c3:01:
>        97:e2:cf:71
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 1
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 3
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    x  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    x  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c1-t5
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhui/$basearch
>    client/all/$basearch
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>
>Proceed? (y/n) y
>
>..........................................................+++
>.............................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c1-t5.crt
>
>------------------------------------------------------------------------------
>rhui (client) => openssl x509 -in /tmp/t0/c1-t5.crt -noout -text
>Invalid menu item; type "?" for a list of available commands
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c1-t5.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 275 (0x113)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:43:40 2012 GMT
>            Not After : Sep 27 16:43:40 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:c3:a8:ec:ba:b8:1f:a5:56:7d:83:74:d8:64:84:
>                    d9:83:c1:cf:99:61:5e:c9:d0:94:48:d1:07:ae:1b:
>                    b5:03:b7:99:71:92:a9:f9:a0:34:44:8d:78:85:d4:
>                    e7:ca:01:17:86:59:36:37:77:65:d1:26:57:cb:51:
>                    19:d8:1e:b4:92:91:cf:d7:d4:58:15:fc:ea:a3:77:
>                    19:63:3e:df:47:d1:db:9a:80:4f:72:a3:58:e4:da:
>                    86:21:ba:e6:b2:84:94:a8:0e:1d:0b:b1:31:c3:6a:
>                    6b:0b:45:83:0f:24:7f:9b:98:30:8f:f4:da:01:de:
>                    98:e2:f6:28:bc:03:59:cf:d8:ea:7e:2c:0e:4c:64:
>                    c3:27:99:47:16:6c:61:4c:2f:c2:89:92:34:f1:b6:
>                    c2:7d:49:2b:68:71:bd:06:f3:c0:46:39:69:33:92:
>                    6b:10:26:95:bf:67:48:b8:58:ad:8e:d6:ab:97:41:
>                    b3:68:5f:d4:70:d2:c8:eb:cb:29:84:54:df:69:15:
>                    e0:64:49:1b:1e:69:da:56:07:81:3d:bf:e1:6f:ec:
>                    62:2b:fa:13:fd:a3:d3:ca:43:5c:cb:6a:57:e2:c4:
>                    38:41:d7:88:6f:db:eb:8b:27:2f:39:3b:72:01:7c:
>                    4c:1b:7b:bf:af:92:7e:08:66:c8:ed:26:1e:ee:68:
>                    71:97
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10000.1.1:
>                ..Custom Repositories - 10000
>            1.3.6.1.4.1.2312.9.2.10000.1.2:
>                ..custom-10000
>            1.3.6.1.4.1.2312.9.2.10000.1.6:
>                ..client/rhui/$basearch
>            1.3.6.1.4.1.2312.9.2.10003.1.1:
>                ..Custom Repositories - 10003
>            1.3.6.1.4.1.2312.9.2.10003.1.2:
>                ..custom-10003
>            1.3.6.1.4.1.2312.9.2.10003.1.6:
>                ..client/all/$basearch
>            1.3.6.1.4.1.2312.9.2.1029.1.1:
>                .2Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>            1.3.6.1.4.1.2312.9.2.1029.1.2:
>                ..rhel-6-server-rhui-rpms
>            1.3.6.1.4.1.2312.9.2.1029.1.6:
>                .9/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
>    Signature Algorithm: sha1WithRSAEncryption
>        8e:af:23:4c:41:ca:e2:8e:21:72:41:5d:56:c5:a5:1b:d6:a5:
>        9c:1a:a2:42:2f:fe:b8:99:80:bb:06:ad:67:75:cc:96:a1:8d:
>        04:f5:d1:3c:c1:b4:26:08:81:50:cd:f2:b2:64:35:ce:8d:d6:
>        90:0d:29:36:15:16:d4:81:52:3a:3f:2c:25:de:87:7e:cd:76:
>        d5:93:0f:09:cd:59:10:1e:3c:bb:5f:cf:27:09:d0:dd:53:93:
>        2d:71:13:7f:d1:62:7c:34:47:e1:55:26:78:96:12:80:5a:70:
>        64:6f:fb:ea:51:07:13:33:e8:10:a1:4f:da:dc:29:8d:d4:9c:
>        9f:e1:45:ed:05:35:e5:c9:b0:c1:91:5f:08:ac:3b:9a:f2:62:
>        d7:46:99:4d:b6:cd:1a:c2:0a:d4:7c:b5:c4:76:7d:b2:de:11:
>        78:a2:ce:ee:33:c9:0a:81:68:03:ad:f6:d4:83:09:70:a5:ef:
>        90:73:e6:95:38:d2:6b:3a:2f:f5:a5:60:01:14:15:ca:af:c7:
>        69:64:4b:12:34:f7:d8:b0:a0:55:b1:37:db:47:dc:c0:25:37:
>        70:e4:4a:d9:4a:0d:e9:83:28:7c:0e:55:3b:6c:99:e7:58:45:
>        2e:41:d8:6a:29:1c:6b:cb:2a:53:20:b4:c9:d6:70:8d:79:58:
>        7b:05:5f:f1
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 1
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 6-7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    x  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c1-06
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    cluster-1-b-$basearch
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>
>Proceed? (y/n) y
>
>...............................+++
>.........+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c1-06.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c1-06.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 276 (0x114)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:46:24 2012 GMT
>            Not After : Sep 27 16:46:24 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:be:7c:bb:fd:36:74:34:77:58:6a:e0:63:78:01:
>                    7b:da:68:c0:17:fe:8b:83:4e:80:4e:e2:51:33:f1:
>                    28:76:a5:d8:8f:29:bf:af:17:54:80:c6:87:eb:f0:
>                    8e:7a:83:b8:b0:43:d9:88:62:96:f2:7a:a2:87:eb:
>                    c7:4d:75:f9:83:e1:74:5f:d2:f5:11:08:a5:7c:ec:
>                    31:dc:1b:8d:b9:4a:06:90:6b:90:68:47:1d:fc:60:
>                    ce:e7:ff:9d:19:73:b1:eb:52:fa:1d:d2:0c:92:84:
>                    92:89:c4:e5:d9:87:10:83:de:78:a8:6a:bd:3f:6e:
>                    ef:7f:40:e9:5f:5b:ee:70:b1:0a:c6:96:ec:f3:9c:
>                    c9:d3:02:21:0f:56:30:c5:ff:f5:f7:cf:81:42:31:
>                    9c:68:44:9f:a6:04:2b:f7:14:74:26:22:07:7d:7b:
>                    dd:f8:29:89:e2:28:f8:86:dd:9d:3d:a9:70:34:5f:
>                    61:37:d4:22:a6:d5:63:9b:05:b3:9c:0b:15:01:dc:
>                    e9:03:3b:52:92:61:30:fb:9b:d0:6a:c4:d3:34:30:
>                    d9:54:ba:7e:bb:cf:5c:98:a2:59:bd:35:7f:bf:16:
>                    d6:97:a5:1e:bb:6d:d9:f8:de:ff:3a:1c:f1:fa:17:
>                    a6:5f:15:b4:81:9a:72:c6:26:6e:63:d7:6a:0e:b0:
>                    44:13
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10007.1.1:
>                ..Custom Repositories - 10007
>            1.3.6.1.4.1.2312.9.2.10007.1.2:
>                ..custom-10007
>            1.3.6.1.4.1.2312.9.2.10007.1.6:
>                ..cluster-1-b-$basearch
>            1.3.6.1.4.1.2312.9.2.1029.1.1:
>                .2Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>            1.3.6.1.4.1.2312.9.2.1029.1.2:
>                ..rhel-6-server-rhui-rpms
>            1.3.6.1.4.1.2312.9.2.1029.1.6:
>                .9/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
>    Signature Algorithm: sha1WithRSAEncryption
>        50:14:d9:55:db:4a:05:47:1b:e0:e9:de:5e:14:a6:97:8f:1c:
>        e5:a1:a7:c6:67:6a:2e:05:12:17:3a:c7:5a:7b:1c:c5:94:c0:
>        41:44:e9:40:37:fa:17:00:9f:e1:a2:80:e5:05:0e:28:e1:20:
>        b3:ec:4e:f2:4f:85:d3:d2:74:10:68:4b:4b:17:90:f6:0c:9b:
>        3e:a8:a9:2d:e3:6e:c7:a6:da:b7:8c:4e:36:b3:aa:fb:89:7a:
>        8a:f9:6f:43:e1:c2:6b:65:b7:98:f1:6d:42:3a:0f:59:c7:6a:
>        c0:31:44:55:0c:2a:40:b8:47:23:9f:75:17:ca:a1:a9:73:f2:
>        5c:66:b5:2a:a3:73:cc:ed:5c:44:85:eb:9a:0f:5a:c0:59:e9:
>        3f:71:cd:fd:99:97:b7:92:cb:25:73:d6:49:30:c0:3e:f7:66:
>        a5:fd:a2:b0:bb:2f:db:95:93:17:23:50:ea:07:6f:ec:14:4a:
>        d7:72:c6:76:d0:fa:16:aa:39:af:9e:55:c5:16:6a:85:3f:fc:
>        47:1a:4a:d4:f6:e0:1e:cd:f5:62:a3:d9:93:bc:fa:bd:d7:e0:
>        cd:43:e0:71:0b:ef:9d:01:0e:ec:c5:52:98:cf:73:dc:24:9c:
>        e0:8c:e1:66:c1:5b:e4:4d:a5:1f:ec:47:5f:50:29:20:ee:cd:
>        9b:e3:ab:0a
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 1
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 4-5
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    x  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    x  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    x  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    x  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: v
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-1-a/$basearch
>             cluster-1-a-i386
>             cluster-1-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    x  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    x  5 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>    -  6 : cluster-1-b-$basearch
>             cluster-1-b-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c1-07
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhel6/$basearch
>    client/rhel5/$basearch
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>
>Proceed? (y/n) y
>
>..........................................................................+++
>.........+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c1-07.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c1-07.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 277 (0x115)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:49:37 2012 GMT
>            Not After : Sep 27 16:49:37 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:d0:d0:54:a8:1b:23:5d:de:08:dd:9a:29:a5:e8:
>                    65:cc:2d:24:be:83:30:df:e2:5f:f3:56:bc:de:08:
>                    8c:e7:92:c3:e5:e9:7c:fc:77:49:f5:89:f2:82:c4:
>                    cf:ef:45:55:b3:2a:64:47:a9:d4:33:d7:a6:87:f5:
>                    de:1c:6e:c8:56:f9:e3:ff:e9:fa:b8:40:3c:d1:80:
>                    b4:3d:6a:e6:85:48:79:44:91:52:52:ad:74:a3:22:
>                    e8:f3:36:22:d1:c4:28:aa:21:8c:b5:97:89:a5:60:
>                    ef:46:2f:49:b1:4d:82:d6:de:a8:89:96:00:16:18:
>                    62:bc:66:40:0e:b7:a5:cd:cd:b3:72:4d:29:d9:32:
>                    52:f9:44:bd:02:b9:1f:43:00:ba:1a:2f:fd:e5:94:
>                    21:5b:a9:b6:1c:27:4f:38:a7:f7:9a:af:68:d6:59:
>                    d5:bb:5d:24:32:45:00:10:42:f2:e6:0c:3b:fb:97:
>                    c3:53:05:20:55:ce:6e:85:d3:7d:a7:11:8b:ef:de:
>                    27:f1:1f:37:e9:c6:ca:ae:33:29:5b:a4:77:36:91:
>                    bd:62:03:2e:6e:d6:ef:03:64:ef:cf:88:1c:c9:a7:
>                    2a:58:46:56:49:bc:5d:39:d0:25:9a:db:de:1f:7b:
>                    fe:24:5f:a8:68:c2:4f:d9:9b:8c:fb:fd:24:ac:8b:
>                    94:8d
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10004.1.1:
>                ..Custom Repositories - 10004
>            1.3.6.1.4.1.2312.9.2.10004.1.2:
>                ..custom-10004
>            1.3.6.1.4.1.2312.9.2.10004.1.6:
>                ..client/rhel6/$basearch
>            1.3.6.1.4.1.2312.9.2.10006.1.1:
>                ..Custom Repositories - 10006
>            1.3.6.1.4.1.2312.9.2.10006.1.2:
>                ..custom-10006
>            1.3.6.1.4.1.2312.9.2.10006.1.6:
>                ..client/rhel5/$basearch
>            1.3.6.1.4.1.2312.9.2.1029.1.1:
>                .2Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>            1.3.6.1.4.1.2312.9.2.1029.1.2:
>                ..rhel-6-server-rhui-rpms
>            1.3.6.1.4.1.2312.9.2.1029.1.6:
>                .9/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
>    Signature Algorithm: sha1WithRSAEncryption
>        05:ea:62:af:53:e4:ac:e9:ea:48:fc:9a:d8:02:1f:0e:7d:70:
>        8c:e1:71:92:65:fc:9f:49:da:62:d9:96:30:cf:1d:bf:14:81:
>        e6:8a:a0:51:0d:4d:4a:1b:a4:63:8e:9a:6d:bb:e4:78:99:95:
>        84:92:03:18:fb:d3:b8:c8:e9:c6:c3:91:98:ac:77:f8:39:b2:
>        3c:41:f0:46:73:91:02:ce:1c:6b:4a:83:c8:d6:63:53:66:ae:
>        ce:68:ba:76:fd:1f:a6:f6:bd:0b:b9:fb:8d:98:26:38:1d:80:
>        94:90:6b:7e:1a:94:e2:d8:29:8e:62:70:4b:cb:0c:0d:dd:87:
>        a0:d4:92:a9:46:c4:68:ad:b6:ff:75:32:17:f1:66:56:ca:9d:
>        8e:76:cb:43:8a:58:3c:a2:92:f4:ad:5c:2c:4e:ad:4d:c2:dd:
>        cb:ef:7a:65:2a:c4:7c:de:41:50:01:40:fb:d4:b3:43:1b:ac:
>        9d:e1:a3:f5:5d:c0:63:4c:47:47:5c:a9:4c:09:42:58:28:47:
>        64:19:f9:91:ef:69:b8:3b:df:5d:1b:09:f1:3d:55:67:cf:b3:
>        0b:a7:ef:31:9c:ee:24:d4:0e:a6:90:81:6f:2a:89:6a:33:e7:
>        f4:4a:58:b1:c9:8a:66:cf:f8:1e:d4:14:b6:50:33:27:4b:0c:
>        95:54:8c:64
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 2
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1-8
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    x  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    x  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    x  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    x  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    x  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    x  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c2-01
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhui/$basearch
>    cluster-2-a/$basearch
>    client/all/$basearch
>    client/rhel6/$basearch
>    cluster-2-b-$basearch
>    client/rhel5/$basearch
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    Red Hat Update Infrastructure 2 (RPMs)
>
>Proceed? (y/n) y
>
>................................+++
>..........+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c2-01.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c2-01.crt -noout- text
>unknown option -noout-
>usage: x509 args
> -inform arg     - input format - default PEM (one of DER, NET or PEM)
> -outform arg    - output format - default PEM (one of DER, NET or PEM)
> -keyform arg    - private key format - default PEM
> -CAform arg     - CA format - default PEM
> -CAkeyform arg  - CA key format - default PEM
> -in arg         - input file - default stdin
> -out arg        - output file - default stdout
> -passin arg     - private key password source
> -serial         - print serial number value
> -subject_hash   - print subject hash value
> -subject_hash_old   - print old-style (MD5) subject hash value
> -issuer_hash    - print issuer hash value
> -issuer_hash_old    - print old-style (MD5) issuer hash value
> -hash           - synonym for -subject_hash
> -subject        - print subject DN
> -issuer         - print issuer DN
> -email          - print email address(es)
> -startdate      - notBefore field
> -enddate        - notAfter field
> -purpose        - print out certificate purposes
> -dates          - both Before and After dates
> -modulus        - print the RSA key modulus
> -pubkey         - output the public key
> -fingerprint    - print the certificate fingerprint
> -alias          - output certificate alias
> -noout          - no certificate output
> -ocspid         - print OCSP hash values for the subject name and public key
> -ocsp_uri       - print OCSP Responder URL(s)
> -trustout       - output a "trusted" certificate
> -clrtrust       - clear all trusted purposes
> -clrreject      - clear all rejected purposes
> -addtrust arg   - trust certificate for a given purpose
> -addreject arg  - reject certificate for a given purpose
> -setalias arg   - set certificate alias
> -days arg       - How long till expiry of a signed certificate - def 30 days
> -checkend arg   - check whether the cert expires in the next arg seconds
>                   exit 1 if so, 0 if not
> -signkey arg    - self sign cert with arg
> -x509toreq      - output a certification request object
> -req            - input is a certificate request, sign and output.
> -CA arg         - set the CA certificate, must be PEM format.
> -CAkey arg      - set the CA key, must be PEM format
>                   missing, it is assumed to be in the CA file.
> -CAcreateserial - create serial number file if it does not exist
> -CAserial arg   - serial file
> -set_serial     - serial number to use
> -text           - print the certificate in text form
> -C              - print out C code forms
> -<dgst>         - digest to use, see openssl dgst -h output for list
> -extfile        - configuration file with X509V3 extensions to add
> -extensions     - section from config file with X509V3 extensions to add
> -clrext         - delete extensions before signing and input certificate
> -nameopt arg    - various certificate name options
> -engine e       - use engine e, possibly a hardware device.
> -certopt arg    - various certificate text options
>[root@rhua ~]# openssl x509 -in /tmp/t0/c2-01.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 278 (0x116)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:51:20 2012 GMT
>            Not After : Sep 27 16:51:20 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:b2:a5:36:b3:61:d2:97:9d:9b:87:ee:62:25:50:
>                    ef:c7:ba:c7:03:51:8f:08:73:40:bc:8c:97:2b:34:
>                    ae:99:15:c0:d2:7c:bd:d2:de:ef:05:d9:13:d3:7b:
>                    6f:63:81:99:7c:90:a1:dd:a7:dc:d2:ff:68:c9:07:
>                    f2:7f:8b:a6:85:75:36:a0:81:87:71:57:5d:66:b3:
>                    c5:63:7b:db:a3:c0:ef:9d:8f:b7:cb:48:31:19:c6:
>                    cf:bc:0d:59:99:a8:2a:0c:a6:13:d8:f6:cf:c8:f6:
>                    9d:e6:c9:96:60:02:4b:a4:1f:65:51:6f:b4:2b:9d:
>                    94:28:84:77:77:be:21:cd:c7:ff:6f:16:88:92:99:
>                    a6:15:9d:28:ce:cf:ff:c1:96:bf:78:9d:43:63:27:
>                    69:68:ae:07:b8:30:42:24:ed:32:d6:1a:2d:4a:5b:
>                    3a:ba:7d:40:b4:6d:67:89:14:d7:13:bb:dc:1d:62:
>                    76:23:4e:2b:b0:83:69:01:a8:96:65:8d:91:29:f8:
>                    94:93:f5:48:b8:c9:a8:d0:bd:97:cf:72:c9:85:64:
>                    66:da:f5:15:d1:78:78:62:5c:be:cc:a2:0f:3c:a2:
>                    03:29:19:e1:47:96:2d:2b:3a:5a:45:28:45:14:2e:
>                    3e:01:9b:c1:d2:30:4f:87:5f:31:b2:a1:4b:95:c3:
>                    df:5b
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10000.1.1:
>                ..Custom Repositories - 10000
>            1.3.6.1.4.1.2312.9.2.10000.1.2:
>                ..custom-10000
>            1.3.6.1.4.1.2312.9.2.10000.1.6:
>                ..client/rhui/$basearch
>            1.3.6.1.4.1.2312.9.2.10002.1.1:
>                ..Custom Repositories - 10002
>            1.3.6.1.4.1.2312.9.2.10002.1.2:
>                ..custom-10002
>            1.3.6.1.4.1.2312.9.2.10002.1.6:
>                ..cluster-2-a/$basearch
>            1.3.6.1.4.1.2312.9.2.10003.1.1:
>                ..Custom Repositories - 10003
>            1.3.6.1.4.1.2312.9.2.10003.1.2:
>                ..custom-10003
>            1.3.6.1.4.1.2312.9.2.10003.1.6:
>                ..client/all/$basearch
>            1.3.6.1.4.1.2312.9.2.10004.1.1:
>                ..Custom Repositories - 10004
>            1.3.6.1.4.1.2312.9.2.10004.1.2:
>                ..custom-10004
>            1.3.6.1.4.1.2312.9.2.10004.1.6:
>                ..client/rhel6/$basearch
>            1.3.6.1.4.1.2312.9.2.10005.1.1:
>                ..Custom Repositories - 10005
>            1.3.6.1.4.1.2312.9.2.10005.1.2:
>                ..custom-10005
>            1.3.6.1.4.1.2312.9.2.10005.1.6:
>                ..cluster-2-b-$basearch
>            1.3.6.1.4.1.2312.9.2.10006.1.1:
>                ..Custom Repositories - 10006
>            1.3.6.1.4.1.2312.9.2.10006.1.2:
>                ..custom-10006
>            1.3.6.1.4.1.2312.9.2.10006.1.6:
>                ..client/rhel5/$basearch
>            1.3.6.1.4.1.2312.9.2.1029.1.1:
>                .2Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>            1.3.6.1.4.1.2312.9.2.1029.1.2:
>                ..rhel-6-server-rhui-rpms
>            1.3.6.1.4.1.2312.9.2.1029.1.6:
>                .9/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
>            1.3.6.1.4.1.2312.9.2.1074.1.1:
>                .&Red Hat Update Infrastructure 2 (RPMs)
>            1.3.6.1.4.1.2312.9.2.1074.1.2:
>                ..rhel-x86_64-6-rhui-2-rpms
>            1.3.6.1.4.1.2312.9.2.1074.1.6:
>                .@/content/dist/rhel/rhui/server/6/$releasever/$basearch/rhui/2/os
>    Signature Algorithm: sha1WithRSAEncryption
>        4e:78:06:c8:3a:55:3f:4d:2f:e7:4a:f8:04:ec:ca:fb:e2:6c:
>        21:74:b8:a0:13:73:fe:36:18:f3:db:de:b3:cc:f8:4f:cf:75:
>        60:0c:fe:ac:03:4f:83:85:92:5f:ee:68:6a:eb:c7:2f:e1:a7:
>        0a:77:b7:9c:0c:b2:e4:10:40:5f:f6:f1:ae:6e:e5:3b:c6:9f:
>        a3:b9:29:14:e8:d4:c6:b0:34:50:0a:f4:64:3e:45:2c:b0:07:
>        55:73:f1:a3:93:5f:e0:79:ac:9e:ee:4d:c8:4f:26:83:67:ee:
>        e4:3d:e0:05:5c:25:a2:b7:ef:01:c4:a0:4b:ba:12:a9:00:17:
>        9c:9e:9c:89:6a:b9:dd:3f:c1:c7:68:bb:40:b5:b3:85:a7:e2:
>        6c:6a:5d:7d:63:a6:ec:52:97:8d:d0:36:83:82:1c:9d:eb:f2:
>        fc:f8:56:1e:23:02:03:cc:f7:3e:b9:0f:e0:e5:15:11:75:d3:
>        f1:3e:89:99:84:8d:65:f5:ab:40:d5:e4:ec:75:e7:27:57:ef:
>        e0:8e:20:c3:b1:f5:1c:7e:19:03:ab:b0:5d:44:4f:0e:e8:ca:
>        8e:ae:ac:2f:93:ad:4b:cc:4d:e0:87:89:48:12:54:13:97:30:
>        dc:8f:e4:91:67:99:36:81:ae:47:0e:8f:46:98:87:81:6a:a8:
>        e3:44:01:10
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 2
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 7-8
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    x  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c2-01
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    Red Hat Update Infrastructure 2 (RPMs)
>
>Proceed? (y/n) y
>
>..........+++
>................................................................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c2-01.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# opensll x509 -in  -noout -text
>-bash: opensll: command not found
>[root@rhua ~]# openssl x509 -in /tmp/t0/c2-01.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 279 (0x117)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:53:17 2012 GMT
>            Not After : Sep 27 16:53:17 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:c1:38:33:4a:3a:a8:5b:b0:9a:81:42:52:0a:14:
>                    eb:15:01:64:ab:a3:33:15:ce:1e:73:e5:ed:ca:ca:
>                    94:f5:f5:ca:52:03:f1:1d:b4:61:b9:56:1a:ce:a1:
>                    f0:b4:69:57:0a:07:16:24:9a:47:78:5c:01:51:5a:
>                    43:4d:15:9f:b4:4b:7f:89:2c:50:12:09:74:88:fa:
>                    6a:79:7f:ab:e3:1d:f8:08:45:3c:30:c5:b9:6f:7a:
>                    8d:0c:2d:07:18:11:84:68:b2:5f:0f:0f:df:28:4b:
>                    f8:10:e3:38:23:56:02:93:19:bf:ad:0c:d2:aa:df:
>                    b5:4d:57:d6:5b:9d:73:8e:43:ff:94:20:d1:b4:35:
>                    ca:9a:da:29:ed:06:db:91:47:57:3b:17:a7:f4:9a:
>                    9f:89:c6:6a:20:2a:a2:18:c0:fc:3c:48:a7:13:71:
>                    78:3f:ed:bf:6a:9d:42:e1:15:a6:c5:d1:a8:eb:b6:
>                    f8:1c:87:86:07:a0:62:01:e2:dc:17:53:b6:d3:b4:
>                    29:5b:c1:5c:53:b4:72:ca:a1:9f:9e:bd:0f:3e:34:
>                    1f:9e:5b:d0:73:06:79:a1:67:f1:ae:c1:39:8e:1d:
>                    a0:b0:63:57:14:31:1a:b8:59:bb:9b:b8:fd:c3:36:
>                    25:a4:33:ad:9e:cf:2e:a6:be:de:e9:af:b8:03:38:
>                    8f:2b
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.1029.1.1:
>                .2Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>            1.3.6.1.4.1.2312.9.2.1029.1.2:
>                ..rhel-6-server-rhui-rpms
>            1.3.6.1.4.1.2312.9.2.1029.1.6:
>                .9/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
>            1.3.6.1.4.1.2312.9.2.1074.1.1:
>                .&Red Hat Update Infrastructure 2 (RPMs)
>            1.3.6.1.4.1.2312.9.2.1074.1.2:
>                ..rhel-x86_64-6-rhui-2-rpms
>            1.3.6.1.4.1.2312.9.2.1074.1.6:
>                .@/content/dist/rhel/rhui/server/6/$releasever/$basearch/rhui/2/os
>    Signature Algorithm: sha1WithRSAEncryption
>        11:07:be:c6:97:fe:10:41:dc:cc:f8:3f:ad:9f:07:40:6d:de:
>        2d:8e:31:a2:d3:4e:50:79:7f:58:0b:e7:70:cf:a5:f0:62:ed:
>        a9:e1:da:81:22:df:0e:b6:c4:ec:9b:34:2b:6e:64:9f:7a:95:
>        da:43:09:6d:5a:23:2e:f4:f1:3f:ce:5c:21:cf:9b:3b:a9:70:
>        8d:f0:5d:a7:c9:07:9c:e9:ac:d9:86:e9:1d:ff:69:69:d6:a0:
>        b0:e7:48:ae:d2:5f:9f:d2:01:97:24:28:7a:cc:6a:28:29:d5:
>        a8:1a:e5:24:cc:c6:63:a0:83:f0:24:46:a6:1d:c5:b9:08:0c:
>        2d:46:03:51:cb:64:3d:54:79:92:65:9b:21:e8:9d:7b:be:41:
>        b2:a0:54:40:db:7d:67:d6:af:48:8c:13:7e:a9:e2:61:82:57:
>        20:df:b9:e4:ab:89:77:0c:c3:fa:64:89:ec:b0:a0:6a:3a:78:
>        1c:43:04:84:00:ce:41:0c:9f:bc:f7:cc:00:23:b7:87:a2:fa:
>        ba:63:be:ad:27:89:f5:7e:e9:32:d0:f9:51:c5:f1:54:18:63:
>        4f:73:53:8c:49:8b:07:cb:82:06:ff:a8:e8:61:d9:32:a4:26:
>        29:47:10:f6:06:a2:76:cf:07:6a:e8:64:0e:79:d3:8d:f5:12:
>        3f:6f:e5:af
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 2
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1-6
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    x  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    x  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    x  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    x  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    x  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c2-03
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhui/$basearch
>    cluster-2-a/$basearch
>    client/all/$basearch
>    client/rhel6/$basearch
>    cluster-2-b-$basearch
>    client/rhel5/$basearch
>
>Proceed? (y/n) y
>
>...........................................................................................................................................................+++
>..............+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c2-03.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c2-03.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 280 (0x118)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:55:19 2012 GMT
>            Not After : Sep 27 16:55:19 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:bc:a5:9f:9c:24:b6:9a:02:39:9f:d5:75:f9:94:
>                    a5:d9:cc:8f:7d:f9:a3:65:0b:08:ae:5c:06:6c:40:
>                    5d:e0:e8:6a:9e:b2:45:4c:56:0d:1e:d3:19:92:49:
>                    97:7e:4e:f2:e0:57:86:70:f2:06:9e:04:5b:4c:6e:
>                    1c:b2:90:6e:cd:26:ec:6d:ae:db:74:a2:da:96:fe:
>                    c7:c2:8f:0d:f8:1e:9c:03:58:a6:d0:cc:68:89:fd:
>                    b5:51:20:82:9d:43:90:62:e8:3a:98:cd:9b:5d:6b:
>                    1e:c3:e6:04:8f:55:c6:9e:d3:4c:96:40:0b:af:16:
>                    1e:95:1b:9e:11:d9:1d:23:80:c9:34:68:8e:45:12:
>                    c3:d1:34:3e:1c:27:fa:94:30:17:54:8f:4b:15:2a:
>                    08:69:74:29:87:a7:93:db:16:5f:12:a4:b1:c0:a3:
>                    df:d3:ad:1a:cc:62:34:e0:ec:71:e0:fd:3b:ef:b2:
>                    a6:d4:43:cf:48:38:df:ae:a0:a1:31:45:56:fe:28:
>                    e9:ee:10:0b:ec:ab:b3:c2:36:0c:c4:5e:66:16:8b:
>                    8c:ba:22:c3:05:e2:dd:12:4b:52:ec:d8:bd:d5:d2:
>                    9f:d0:5d:9d:8a:fe:10:06:a2:65:7b:9b:4c:f1:18:
>                    3c:52:a1:3e:d0:d3:cd:c7:cb:94:8a:7e:d6:c5:12:
>                    93:79
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10000.1.1:
>                ..Custom Repositories - 10000
>            1.3.6.1.4.1.2312.9.2.10000.1.2:
>                ..custom-10000
>            1.3.6.1.4.1.2312.9.2.10000.1.6:
>                ..client/rhui/$basearch
>            1.3.6.1.4.1.2312.9.2.10002.1.1:
>                ..Custom Repositories - 10002
>            1.3.6.1.4.1.2312.9.2.10002.1.2:
>                ..custom-10002
>            1.3.6.1.4.1.2312.9.2.10002.1.6:
>                ..cluster-2-a/$basearch
>            1.3.6.1.4.1.2312.9.2.10003.1.1:
>                ..Custom Repositories - 10003
>            1.3.6.1.4.1.2312.9.2.10003.1.2:
>                ..custom-10003
>            1.3.6.1.4.1.2312.9.2.10003.1.6:
>                ..client/all/$basearch
>            1.3.6.1.4.1.2312.9.2.10004.1.1:
>                ..Custom Repositories - 10004
>            1.3.6.1.4.1.2312.9.2.10004.1.2:
>                ..custom-10004
>            1.3.6.1.4.1.2312.9.2.10004.1.6:
>                ..client/rhel6/$basearch
>            1.3.6.1.4.1.2312.9.2.10005.1.1:
>                ..Custom Repositories - 10005
>            1.3.6.1.4.1.2312.9.2.10005.1.2:
>                ..custom-10005
>            1.3.6.1.4.1.2312.9.2.10005.1.6:
>                ..cluster-2-b-$basearch
>            1.3.6.1.4.1.2312.9.2.10006.1.1:
>                ..Custom Repositories - 10006
>            1.3.6.1.4.1.2312.9.2.10006.1.2:
>                ..custom-10006
>            1.3.6.1.4.1.2312.9.2.10006.1.6:
>                ..client/rhel5/$basearch
>    Signature Algorithm: sha1WithRSAEncryption
>        5c:e4:bb:87:b8:a2:d3:f4:f9:3e:6f:cf:ae:b0:4f:fd:91:42:
>        91:b6:b8:cb:a3:2d:f4:6d:4c:59:03:9c:09:8f:f3:95:cb:1f:
>        a7:16:2b:0d:c9:46:f9:47:41:3f:ee:79:66:40:bd:49:fe:34:
>        47:c6:43:9d:1f:7f:86:e2:a7:15:7f:95:a6:83:97:1c:ac:05:
>        85:a8:e7:7e:b2:ad:25:ab:1e:12:dd:ce:47:a8:e0:a9:19:e9:
>        db:bc:e6:fc:b3:7e:f8:24:66:67:e1:17:76:46:a8:94:88:44:
>        ae:2a:36:2e:f1:ec:ec:32:f5:5f:2c:af:c2:2f:1c:f6:c2:43:
>        d6:8a:84:3b:bd:18:f0:37:87:f7:21:9c:b0:c1:d1:0a:45:f2:
>        8f:87:67:2b:d8:c8:c5:38:bd:d3:4f:fe:aa:a4:a7:13:03:26:
>        5c:06:b8:df:aa:e5:03:d0:7e:0d:84:ce:9f:b3:f3:d4:bd:e1:
>        b0:46:31:b7:2f:84:e5:6f:66:f3:91:8d:e9:d3:9e:18:24:63:
>        ec:43:f2:0b:5a:aa:c2:08:0d:f1:db:1f:10:eb:94:f0:23:63:
>        95:dc:8d:f0:2c:39:b2:69:8e:07:05:ad:f8:55:b7:86:aa:f8:
>        4e:28:7a:4c:06:bb:01:51:fd:ed:07:96:46:31:09:81:50:a1:
>        80:39:54:a8
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 2
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1-2
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    x  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c2-04
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhui/$basearch
>    cluster-2-a/$basearch
>
>Proceed? (y/n) y
>
>.........................+++
>.......................................................................................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c2-04.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c2-04.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 281 (0x119)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:56:34 2012 GMT
>            Not After : Sep 27 16:56:34 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:a2:a5:78:6a:f2:c4:ca:f9:c4:bf:26:8f:73:b4:
>                    37:19:d0:d1:e6:fb:9d:1a:96:d3:ae:e1:8d:cd:17:
>                    44:9b:7c:02:5c:a2:72:25:99:d3:fe:f7:44:78:06:
>                    62:b1:04:c1:e7:94:ba:08:45:9f:f6:1a:7e:80:6d:
>                    1a:25:49:b5:e4:da:ac:36:17:ce:8a:ee:fa:fd:93:
>                    13:d4:28:87:80:6d:d1:a8:b1:9f:fe:a5:9b:6f:b3:
>                    bc:3a:84:8f:42:39:0a:43:29:fe:9a:16:e9:7c:17:
>                    30:ed:16:74:9b:bf:94:09:04:ab:a8:14:7e:f5:7e:
>                    c0:ae:e2:d5:2c:d4:63:27:42:ed:05:b6:b0:cd:87:
>                    d5:d9:6f:de:34:12:be:73:5f:da:15:93:a6:df:18:
>                    ec:d8:75:99:30:60:2f:08:78:60:35:bf:fd:ae:b7:
>                    ed:d7:7a:97:51:57:43:ab:cd:77:c5:2b:21:01:bf:
>                    8b:d4:d2:e5:91:09:c7:a6:96:cf:fb:24:8c:33:2b:
>                    03:42:d1:29:68:b3:bc:b6:fc:3d:f3:e5:3b:3b:17:
>                    8f:02:e7:fc:45:6d:60:56:22:7b:58:b8:08:48:c9:
>                    2b:cd:7e:7e:ea:fb:d8:0f:71:1c:1b:e6:6b:6f:78:
>                    e5:99:52:03:1e:c9:ad:42:8c:26:c5:cc:86:04:95:
>                    87:17
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10000.1.1:
>                ..Custom Repositories - 10000
>            1.3.6.1.4.1.2312.9.2.10000.1.2:
>                ..custom-10000
>            1.3.6.1.4.1.2312.9.2.10000.1.6:
>                ..client/rhui/$basearch
>            1.3.6.1.4.1.2312.9.2.10002.1.1:
>                ..Custom Repositories - 10002
>            1.3.6.1.4.1.2312.9.2.10002.1.2:
>                ..custom-10002
>            1.3.6.1.4.1.2312.9.2.10002.1.6:
>                ..cluster-2-a/$basearch
>    Signature Algorithm: sha1WithRSAEncryption
>        62:b4:95:33:1c:ae:60:00:ef:19:ba:3a:74:26:e7:d7:65:06:
>        f8:8b:89:3d:6b:d5:78:e6:b4:c8:5c:ec:fb:e0:80:2f:79:39:
>        35:5e:e4:e6:8e:7f:e3:c3:34:d5:dd:42:be:a7:73:68:64:e7:
>        7f:bc:b2:5e:cb:ef:6a:a4:e4:c2:c1:5f:f0:4d:4c:47:10:2e:
>        77:4d:c1:c1:6d:54:71:95:70:10:28:fe:21:7c:f5:53:2a:0a:
>        23:ae:0e:44:42:5d:2d:a7:5a:50:3b:f2:8e:3e:3c:32:08:02:
>        bc:20:3a:89:45:bb:a8:1c:01:56:c8:4b:bb:c5:e2:d0:19:e8:
>        fc:9b:05:84:df:f2:76:49:84:eb:5d:2c:74:01:28:7e:ac:80:
>        76:3f:ff:1f:80:37:d1:bc:a7:ee:dd:2c:64:3f:6d:f0:df:eb:
>        4a:ca:49:51:c8:e1:01:cc:de:66:17:0a:d3:69:56:17:53:6a:
>        b6:a9:00:04:eb:81:d5:73:b9:66:b8:0e:98:db:e6:dc:2f:d2:
>        1d:d4:f7:5c:e6:58:c4:38:9a:dc:8a:8f:7d:a0:99:60:c8:ba:
>        e8:bd:3d:ee:da:0e:ea:fb:5a:dd:bc:af:8d:3a:77:2e:b2:7b:
>        31:ca:f1:39:dc:6e:54:d7:a2:6f:98:76:75:a7:63:2b:13:2b:
>        94:18:48:13
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 2
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 3
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    x  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    x  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c2-05
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhui/$basearch
>    client/all/$basearch
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>
>Proceed? (y/n) y
>
>...+++
>............................................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Error creating entitlement certificate, check the log file for more information
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# tail ~/.rhui/rhui.log
>writing RSA key
>
>Command [openssl x509 -req -days 365 -in /tmp/t0/c2-05.csr -CA /etc/pki/rhui/entitlement-ca.crt -CAkey /etc/pki/rhui/entitlement-ca-key.pem -CAserial /etc/pki/rhui/entitlement-ca.srl -out /tmp/t0/c2-05.crt -extfile /tmp/t0/c2-05-extensions.txt -extensions rhui]
>Certificate creation output
>
>Signature ok
>subject=/CN=Red Hat Update Infrastructure
>Getting CA Private Key
>unable to load CA Private Key
>
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 2
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 3
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    x  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    x  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    x  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c2-05
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhui/$basearch
>    client/all/$basearch
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>
>Proceed? (y/n) y
>
>....+++
>..............................................................................................................................................................................................................................................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c2-05.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c2-05.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 282 (0x11a)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 16:58:55 2012 GMT
>            Not After : Sep 27 16:58:55 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:c4:a0:46:70:5c:c6:a2:78:d6:64:ab:cb:d5:b3:
>                    d7:37:69:c5:3c:88:09:97:43:4f:be:43:0b:86:1f:
>                    e8:08:b7:a2:bd:81:1e:1e:be:0e:c0:2f:8a:35:9a:
>                    11:44:cb:58:a7:b1:e4:05:83:97:54:37:f3:ee:e2:
>                    8d:1e:e0:35:78:4a:66:41:77:e0:09:6d:ef:36:09:
>                    8f:16:4d:f8:44:78:ad:06:18:5b:cb:15:69:43:0a:
>                    f4:a7:1f:4d:b2:e0:b2:6d:fe:8e:e7:e4:70:7f:55:
>                    f5:02:27:9b:15:2f:f5:22:7a:78:7e:a8:45:97:a6:
>                    fc:7f:7d:41:de:fb:9c:85:ea:78:7f:26:86:1d:a5:
>                    0e:06:eb:52:c0:8d:6d:94:3f:e8:df:b7:d3:22:27:
>                    81:ff:8f:c5:bb:8d:71:27:76:3e:1b:30:8b:5b:da:
>                    64:4e:9f:b5:97:a2:bd:3f:8d:c3:43:29:62:e8:b9:
>                    1a:ae:0f:4f:b9:6a:cc:71:ea:53:cb:84:89:07:b6:
>                    91:06:e4:08:f7:00:84:5f:53:e1:3f:64:84:1d:dd:
>                    5f:94:f2:9b:9f:50:cf:85:83:c2:4f:bf:50:5e:e0:
>                    0e:53:05:fb:af:4e:62:fa:e0:3a:48:17:22:43:e7:
>                    95:ab:27:ba:52:fc:32:17:45:d5:39:39:76:8c:57:
>                    7e:69
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10000.1.1:
>                ..Custom Repositories - 10000
>            1.3.6.1.4.1.2312.9.2.10000.1.2:
>                ..custom-10000
>            1.3.6.1.4.1.2312.9.2.10000.1.6:
>                ..client/rhui/$basearch
>            1.3.6.1.4.1.2312.9.2.10003.1.1:
>                ..Custom Repositories - 10003
>            1.3.6.1.4.1.2312.9.2.10003.1.2:
>                ..custom-10003
>            1.3.6.1.4.1.2312.9.2.10003.1.6:
>                ..client/all/$basearch
>            1.3.6.1.4.1.2312.9.2.1029.1.1:
>                .2Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>            1.3.6.1.4.1.2312.9.2.1029.1.2:
>                ..rhel-6-server-rhui-rpms
>            1.3.6.1.4.1.2312.9.2.1029.1.6:
>                .9/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
>    Signature Algorithm: sha1WithRSAEncryption
>        39:e2:46:a7:61:85:31:11:01:4e:05:10:a3:a0:06:ee:fb:5a:
>        68:33:da:0a:21:14:22:6d:b9:8c:74:e3:7c:43:43:ad:bc:db:
>        f1:c9:38:41:1f:19:a0:b5:c9:63:12:92:b3:21:98:97:95:9c:
>        58:11:bc:b1:76:50:d6:f9:57:e3:1c:da:83:73:21:f4:0d:6f:
>        a8:34:c5:0c:f4:9d:ff:c8:6f:a0:b4:93:d7:17:a3:a5:0d:ad:
>        3a:07:b4:8f:22:01:c4:35:ca:a3:80:8f:18:b9:95:e6:37:68:
>        1f:1f:87:03:f6:04:7b:ad:31:26:be:3f:a5:c6:75:d6:99:08:
>        eb:b3:95:61:37:3e:56:4e:c7:ff:15:5c:3e:62:3f:17:dd:69:
>        a9:49:6e:2a:d3:76:60:57:36:05:09:fd:1b:8a:c0:8c:87:0f:
>        29:b5:56:73:e7:11:22:56:4a:4f:8d:29:c8:6f:82:30:fc:57:
>        bc:2f:91:86:c7:38:12:7f:f2:85:99:cb:7e:58:f5:41:8f:4c:
>        95:c8:e8:08:a3:d8:69:de:4b:18:ca:6a:ec:4d:c2:7c:36:40:
>        c5:72:af:9d:d4:61:01:c7:24:77:f4:4e:21:e3:43:55:5d:b5:
>        b4:6f:3d:b3:b7:96:42:21:f8:cb:6a:69:9f:30:fd:e1:91:54:
>        f5:ef:7e:d3
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 2
>
>6Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: -7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    x  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 6-7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 6-7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    x  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c2-06
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>\
>Number of days the certificate should be valid [365]:
>
>Please enter a number
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhel5/$basearch
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>
>Proceed? (y/n) y
>
>..........................+++
>.................................................................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Error creating entitlement certificate, check the log file for more information
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# tail ~/.rhui/rhui.log
>writing RSA key
>
>Command [openssl x509 -req -days 365 -in /tmp/t0/c2-06.csr -CA /etc/pki/rhui/entitlement-ca.crt -CAkey /etc/pki/rhui/entitlement-ca-key.pem -CAserial /etc/pki/rhui/entitlement-ca.srl -out /tmp/t0/c2-06.crt -extfile /tmp/t0/c2-06-extensions.txt -extensions rhui]
>Certificate creation output
>
>Signature ok
>subject=/CN=Red Hat Update Infrastructure
>Getting CA Private Key
>unable to load CA Private Key
>
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 2
>
>6-7Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 6-7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 6-7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    x  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c2-06
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhel5/$basearch
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>
>Proceed? (y/n) y
>
>.............................................................................................................+++
>...........................................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c2-06.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^A^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c2-06.crt -noout  -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 283 (0x11b)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 17:01:21 2012 GMT
>            Not After : Sep 27 17:01:21 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:de:ab:6a:70:0d:d2:7e:5e:28:cf:01:4e:86:4d:
>                    27:f3:cc:23:9c:7f:42:e8:80:c4:92:1c:32:d6:65:
>                    e7:07:61:59:fb:2c:9b:9b:be:b6:de:b8:b5:25:08:
>                    0c:dd:9d:39:59:03:f2:9d:35:00:4a:e2:46:3b:69:
>                    c1:5a:ce:bc:8d:6e:96:fe:aa:f5:9b:1c:47:2b:d2:
>                    9c:0c:f3:4e:c6:5e:28:b5:25:cc:72:7c:74:cc:4d:
>                    08:39:4e:a6:40:30:e2:ab:1c:db:59:2c:7d:c3:9a:
>                    c3:ed:00:4e:de:47:72:86:b0:a2:e9:29:91:bf:76:
>                    21:a1:d8:6b:14:04:30:d7:59:10:e5:d6:49:97:ac:
>                    1f:4b:c4:da:0d:f4:e8:09:a3:ff:5c:b6:cb:d9:8f:
>                    42:58:4b:7d:ca:53:15:6b:12:4f:5e:81:db:a8:5a:
>                    11:1b:bd:84:92:96:58:b0:f8:86:89:71:60:5b:07:
>                    30:9c:6e:cc:25:7b:55:cf:e2:07:c0:72:b0:da:60:
>                    1b:6d:3c:f7:6f:c4:99:8d:75:6d:16:44:77:64:b4:
>                    72:55:b3:a8:a4:f9:dc:7b:fb:70:1a:85:36:40:78:
>                    71:43:63:de:e3:30:95:57:f6:eb:be:d1:2e:83:31:
>                    5c:e3:bf:49:ed:e1:99:05:81:9f:f6:82:a3:c3:f3:
>                    8b:79
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10006.1.1:
>                ..Custom Repositories - 10006
>            1.3.6.1.4.1.2312.9.2.10006.1.2:
>                ..custom-10006
>            1.3.6.1.4.1.2312.9.2.10006.1.6:
>                ..client/rhel5/$basearch
>            1.3.6.1.4.1.2312.9.2.1029.1.1:
>                .2Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>            1.3.6.1.4.1.2312.9.2.1029.1.2:
>                ..rhel-6-server-rhui-rpms
>            1.3.6.1.4.1.2312.9.2.1029.1.6:
>                .9/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
>    Signature Algorithm: sha1WithRSAEncryption
>        9e:01:38:76:93:75:24:7b:a6:a6:94:01:e5:9a:e3:c1:ac:c8:
>        34:27:6d:c0:2c:a9:63:ef:c1:86:46:c2:ac:ed:4a:b6:f7:e7:
>        2c:b4:18:50:54:88:71:6a:08:c6:82:bf:dc:58:3e:3c:f4:ac:
>        90:db:20:6e:73:1e:99:36:37:60:58:3e:2b:7a:99:90:e9:cd:
>        a1:08:aa:1b:64:0b:e8:bb:e0:65:9b:70:fd:49:4e:01:25:5f:
>        68:5c:3d:c7:3c:f3:6f:32:71:54:99:01:4a:69:39:07:01:d6:
>        ab:6c:f6:02:89:ef:b2:93:f6:4b:26:90:a2:ac:bb:a9:02:79:
>        c9:56:9d:d1:1c:0d:cb:b7:6b:8d:e0:16:80:1c:a6:f5:25:2c:
>        ab:37:3e:e1:bf:9f:6f:15:07:b8:51:9a:72:62:a0:56:de:3d:
>        d2:55:5e:72:7e:70:3b:62:ba:8a:16:af:bb:ed:03:0c:ae:48:
>        4c:bf:62:da:54:76:eb:8d:cd:54:fa:ae:42:03:a5:c3:8e:46:
>        a3:c6:60:51:1a:1f:e7:d2:7e:e8:35:05:5d:ea:21:0f:61:68:
>        72:aa:37:cd:96:ae:90:fe:b0:a7:d2:7d:31:37:4a:c8:1f:c0:
>        3d:a1:17:96:87:72:a0:b1:df:f1:9c:b3:55:19:f8:48:3e:a6:
>        bb:63:df:17
>You have new mail in /var/spool/mail/root
>[root@rhua ~]# fg
>rhui-manager
>e
>
>Select the CDS cluster that clients using this entitlement certificate will use to download content:
>
>  1  - cluster-1
>  2  - cluster-2
>Enter value (1-2) or 'b' to abort: 2
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    -  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    -  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    -  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    -  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: 4-7
>
>Select one or more repositories to include in the entitlement certificate:
>
>  Custom Repositories
>    -  1 : client/rhui/$basearch
>             client-rhui-x86_64
>
>    -  2 : cluster-2-a/$basearch
>             cluster-2-a-i386
>             cluster-2-a-x86_64
>
>    -  3 : client/all/$basearch
>             client-all-x86_64
>             client-all-i386
>
>    x  4 : client/rhel6/$basearch
>             client-rhel6-i386
>             client-rhel6-x86_64
>
>    x  5 : cluster-2-b-$basearch
>             cluster-2-b-x86_64
>
>    x  6 : client/rhel5/$basearch
>             client-rhel5-i386
>             client-rhel5-x86_64
>
>
>  Red Hat Repositories
>    x  7 : Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>    -  8 : Red Hat Update Infrastructure 2 (RPMs)
>
>Enter value (1-8) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>
>Name of the certificate. This will be used as the name of the certificate file
>(name.crt) and its associated private key (name.key). Choose something that will
>help identify the products contained with it:
>c2-07
>
>Local directory in which to save the generated certificate [current directory]:
>/tmp/t0
>
>Number of days the certificate should be valid [365]:
>
>
>Repositories to be included in the entitlement certificate:
>
>  Custom Entitlements
>    client/rhel6/$basearch
>    cluster-2-b-$basearch
>    client/rhel5/$basearch
>
>  Red Hat Repositories
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>
>Proceed? (y/n) y
>
>.........................................................................................+++
>..................................................+++
>Enter pass phrase for /etc/pki/rhui/entitlement-ca-key.pem:
>Entitlement certificate created at /tmp/t0/c2-07.crt
>
>------------------------------------------------------------------------------
>rhui (client) => ^Z
>[1]+  Stopped                 rhui-manager
>[root@rhua ~]# openssl x509 -in /tmp/t0/c2-07.crt -noout
>[root@rhua ~]# openssl x509 -in /tmp/t0/c2-07.crt -noout -textg
>unknown option -textg
>usage: x509 args
> -inform arg     - input format - default PEM (one of DER, NET or PEM)
> -outform arg    - output format - default PEM (one of DER, NET or PEM)
> -keyform arg    - private key format - default PEM
> -CAform arg     - CA format - default PEM
> -CAkeyform arg  - CA key format - default PEM
> -in arg         - input file - default stdin
> -out arg        - output file - default stdout
> -passin arg     - private key password source
> -serial         - print serial number value
> -subject_hash   - print subject hash value
> -subject_hash_old   - print old-style (MD5) subject hash value
> -issuer_hash    - print issuer hash value
> -issuer_hash_old    - print old-style (MD5) issuer hash value
> -hash           - synonym for -subject_hash
> -subject        - print subject DN
> -issuer         - print issuer DN
> -email          - print email address(es)
> -startdate      - notBefore field
> -enddate        - notAfter field
> -purpose        - print out certificate purposes
> -dates          - both Before and After dates
> -modulus        - print the RSA key modulus
> -pubkey         - output the public key
> -fingerprint    - print the certificate fingerprint
> -alias          - output certificate alias
> -noout          - no certificate output
> -ocspid         - print OCSP hash values for the subject name and public key
> -ocsp_uri       - print OCSP Responder URL(s)
> -trustout       - output a "trusted" certificate
> -clrtrust       - clear all trusted purposes
> -clrreject      - clear all rejected purposes
> -addtrust arg   - trust certificate for a given purpose
> -addreject arg  - reject certificate for a given purpose
> -setalias arg   - set certificate alias
> -days arg       - How long till expiry of a signed certificate - def 30 days
> -checkend arg   - check whether the cert expires in the next arg seconds
>                   exit 1 if so, 0 if not
> -signkey arg    - self sign cert with arg
> -x509toreq      - output a certification request object
> -req            - input is a certificate request, sign and output.
> -CA arg         - set the CA certificate, must be PEM format.
> -CAkey arg      - set the CA key, must be PEM format
>                   missing, it is assumed to be in the CA file.
> -CAcreateserial - create serial number file if it does not exist
> -CAserial arg   - serial file
> -set_serial     - serial number to use
> -text           - print the certificate in text form
> -C              - print out C code forms
> -<dgst>         - digest to use, see openssl dgst -h output for list
> -extfile        - configuration file with X509V3 extensions to add
> -extensions     - section from config file with X509V3 extensions to add
> -clrext         - delete extensions before signing and input certificate
> -nameopt arg    - various certificate name options
> -engine e       - use engine e, possibly a hardware device.
> -certopt arg    - various certificate text options
>[root@rhua ~]# openssl x509 -in /tmp/t0/c2-07.crt -noout -text
>Certificate:
>    Data:
>        Version: 3 (0x2)
>        Serial Number: 284 (0x11c)
>        Signature Algorithm: sha1WithRSAEncryption
>        Issuer: C=US, ST=NC, L=Raleigh, CN=rhua.example.com CA
>        Validity
>            Not Before: Sep 27 17:03:05 2012 GMT
>            Not After : Sep 27 17:03:05 2013 GMT
>        Subject: CN=Red Hat Update Infrastructure
>        Subject Public Key Info:
>            Public Key Algorithm: rsaEncryption
>                Public-Key: (2048 bit)
>                Modulus:
>                    00:da:36:2d:97:72:15:43:1f:ad:e5:13:a5:f2:93:
>                    5d:13:8d:e7:7d:f1:e6:c5:d0:e6:19:34:57:59:61:
>                    94:50:99:3e:ea:3b:5b:a6:c4:a7:2a:a9:f6:ef:ce:
>                    b7:47:b9:81:a9:6d:0a:6f:d8:0e:7d:78:fa:30:33:
>                    78:c5:69:d2:25:ea:39:a7:e8:f3:f5:d5:ae:c3:40:
>                    7a:67:50:c4:90:f1:2c:27:c1:2e:bc:fc:7f:b7:3e:
>                    ab:9b:f5:61:96:f8:aa:77:be:01:5f:12:30:93:82:
>                    c7:aa:6a:87:50:4a:0c:82:25:3b:98:93:6b:ce:3b:
>                    bd:f6:42:a2:de:c7:de:aa:b6:a6:4a:a6:fa:a9:da:
>                    fe:d4:9e:5a:1f:53:1b:e0:6c:15:2e:fe:fd:2b:d5:
>                    95:c2:25:86:6c:63:ff:02:f5:2f:61:2a:7c:c1:61:
>                    3a:15:b2:b9:89:c3:9f:54:1c:fb:4c:72:92:91:51:
>                    2a:7c:95:08:c4:90:c9:af:5e:a6:ce:9d:56:70:10:
>                    0e:eb:32:14:69:b4:1f:96:bf:b3:57:fb:e2:dd:e7:
>                    28:ab:ec:f7:d2:cd:09:bf:5a:75:c4:ca:99:db:b0:
>                    97:c1:0a:df:c6:94:84:7b:7d:23:f5:c0:50:88:76:
>                    23:37:d5:a9:23:27:d1:a8:61:65:5b:c7:f6:1a:e2:
>                    a0:79
>                Exponent: 65537 (0x10001)
>        X509v3 extensions:
>            X509v3 Basic Constraints:
>                CA:FALSE
>            1.3.6.1.4.1.2312.9.2.10004.1.1:
>                ..Custom Repositories - 10004
>            1.3.6.1.4.1.2312.9.2.10004.1.2:
>                ..custom-10004
>            1.3.6.1.4.1.2312.9.2.10004.1.6:
>                ..client/rhel6/$basearch
>            1.3.6.1.4.1.2312.9.2.10005.1.1:
>                ..Custom Repositories - 10005
>            1.3.6.1.4.1.2312.9.2.10005.1.2:
>                ..custom-10005
>            1.3.6.1.4.1.2312.9.2.10005.1.6:
>                ..cluster-2-b-$basearch
>            1.3.6.1.4.1.2312.9.2.10006.1.1:
>                ..Custom Repositories - 10006
>            1.3.6.1.4.1.2312.9.2.10006.1.2:
>                ..custom-10006
>            1.3.6.1.4.1.2312.9.2.10006.1.6:
>                ..client/rhel5/$basearch
>            1.3.6.1.4.1.2312.9.2.1029.1.1:
>                .2Red Hat Enterprise Linux 6 Server from RHUI (RPMs)
>            1.3.6.1.4.1.2312.9.2.1029.1.2:
>                ..rhel-6-server-rhui-rpms
>            1.3.6.1.4.1.2312.9.2.1029.1.6:
>                .9/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
>    Signature Algorithm: sha1WithRSAEncryption
>        73:49:68:0b:7f:4e:68:a7:a2:df:e2:93:5d:55:2c:04:11:ed:
>        5a:ab:58:aa:b7:a4:a3:75:06:17:a3:9d:11:5b:4e:1c:57:8e:
>        68:51:b1:ae:27:4f:60:21:27:cd:de:48:43:dc:18:7c:c4:d7:
>        d8:aa:17:74:66:dc:da:58:b4:f6:3c:d1:85:b6:b2:b2:08:f6:
>        84:85:5c:f6:86:fa:18:e3:27:4a:28:ca:08:1a:d7:c1:51:da:
>        c3:49:45:65:49:03:2b:88:d5:d3:70:ed:d5:1f:80:c0:05:62:
>        dd:d9:b8:d3:51:31:1c:db:06:61:2d:16:33:27:5d:21:65:57:
>        69:29:4e:b1:82:0d:8e:6b:c5:da:73:10:f2:94:53:e7:e0:40:
>        c0:53:d0:7d:9f:c2:ce:3d:17:ca:93:b1:54:8a:a8:b9:d1:a0:
>        3d:e0:c3:79:a1:25:dc:8a:7b:f7:ed:bc:da:8b:0a:8c:e5:5f:
>        f2:74:ab:60:14:85:39:fb:03:41:e2:d5:88:50:97:b6:41:b5:
>        a9:87:81:b0:d3:3d:2a:e3:84:de:bd:4e:74:50:85:6c:7b:37:
>        8c:40:4a:df:af:f4:5f:db:7c:c7:f4:3a:c7:3e:8f:91:00:b1:
>        73:e6:92:9f:1e:e6:0f:43:53:48:7f:44:e9:c1:85:ec:2e:58:
>        88:85:aa:e9
>[root@rhua ~]# fg
>rhui-manager
><
>
>------------------------------------------------------------------------------
>             -= Red Hat Update Infrastructure Management Tool =-
>
>
>-= Home =-
>
>   r   manage repositories
>   c   manage content delivery servers (CDS)
>   s   synchronization status and scheduling
>   e   create entitlement certificates and client configuration RPMs
>   n   manage Red Hat entitlement certificates
>   u   manage users
>   i   manage identity certificate
>
>                                                   Connected: rhua.example.com
>------------------------------------------------------------------------------
>rhui (home) => r
>
>------------------------------------------------------------------------------
>             -= Red Hat Update Infrastructure Management Tool =-
>
>
>-= Repository Management =-
>
>   l   list repositories currently managed by the RHUI
>   i   display detailed information on a repository
>   a   add a new Red Hat content repository
>   c   create a new custom repository
>   d   delete a repository from the RHUI
>   u   upload content to a custom repository
>   p   list packages in a repository
>
>                                                   Connected: rhua.example.com
>------------------------------------------------------------------------------
>rhui (repo) => i
>
>Select one or more repositories:
>
>  Custom Repositories
>    -  1 : client-all-i386
>    -  2 : client-all-x86_64
>    -  3 : client-rhel5-i386
>    -  4 : client-rhel5-x86_64
>    -  5 : client-rhel6-i386
>    -  6 : client-rhel6-x86_64
>    -  7 : client-rhui-x86_64
>    -  8 : cluster-1-a-i386
>    -  9 : cluster-1-a-x86_64
>    -  10: cluster-1-b-x86_64
>    -  11: cluster-2-a-i386
>    -  12: cluster-2-a-x86_64
>    -  13: cluster-2-b-x86_64
>
>  Red Hat Repositories
>    -  14: Red Hat Enterprise Linux 6 Server from RHUI (RPMs) (6Server-x86_64)
>    -  15: Red Hat Update Infrastructure 2 (RPMs) (6Server-x86_64)
>
>Enter value (1-15) to toggle selection, 'c' to confirm selections, or '?' for more commands: b
>
>
>
>------------------------------------------------------------------------------
>rhui (repo) => <
>
>------------------------------------------------------------------------------
>             -= Red Hat Update Infrastructure Management Tool =-
>
>
>-= Home =-
>
>   r   manage repositories
>   c   manage content delivery servers (CDS)
>   s   synchronization status and scheduling
>   e   create entitlement certificates and client configuration RPMs
>   n   manage Red Hat entitlement certificates
>   u   manage users
>   i   manage identity certificate
>
>                                                   Connected: rhua.example.com
>------------------------------------------------------------------------------
>rhui (home) => c
>
>------------------------------------------------------------------------------
>             -= Red Hat Update Infrastructure Management Tool =-
>
>
>-= Content Delivery Server (CDS) Management =-
>
>   l   list all CDS clusters and instances managed by the RHUI
>   i   display detailed information on a CDS cluster
>   a   register (add) a new CDS instance
>   m   move CDS(s) to a different cluster
>   d   unregister (delete) a CDS instance from the RHUI
>   s   associate a repository with a CDS cluster
>   u   unassociate a repository from a CDS cluster
>
>                                                   Connected: rhua.example.com
>------------------------------------------------------------------------------
>rhui (cds) => i
>
>Select one or more CDS clusters:
>
>  -  1 : cluster-1
>  -  2 : cluster-2
>Enter value (1-2) to toggle selection, 'c' to confirm selections, or '?' for more commands: 1-2
>
>Select one or more CDS clusters:
>
>  x  1 : cluster-1
>  x  2 : cluster-2
>Enter value (1-2) to toggle selection, 'c' to confirm selections, or '?' for more commands: c
>
>-= RHUI CDS Clusters =-
>
>  cluster-1
>  ---------
>
>    CDS Instances
>    -------------
>    cds.example.com
>      hostname:        cds.example.com
>      client hostname: cds.example.com
>
>    Repositories
>    ------------
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs) (6Server-x86_64)
>    Red Hat Update Infrastructure 2 (RPMs) (6Server-x86_64)
>    client-all-i386
>    client-all-x86_64
>    client-rhel5-i386
>    client-rhel5-x86_64
>    client-rhel6-i386
>    client-rhel6-x86_64
>    client-rhui-x86_64
>    cluster-1-a-i386
>    cluster-1-a-x86_64
>    cluster-1-b-x86_64
>
>
>  cluster-2
>  ---------
>
>    CDS Instances
>    -------------
>    cdt.example.com
>      hostname:        cdt.example.com
>      client hostname: cdt.example.com
>
>    Repositories
>    ------------
>    cluster-2-a-i386
>    cluster-2-a-x86_64
>    cluster-2-b-x86_64
>    client-all-i386
>    client-all-x86_64
>    client-rhel5-i386
>    client-rhel5-x86_64
>    client-rhel6-i386
>    client-rhel6-x86_64
>    client-rhui-x86_64
>    Red Hat Enterprise Linux 6 Server from RHUI (RPMs) (6Server-x86_64)
>    Red Hat Update Infrastructure 2 (RPMs) (6Server-x86_64)
>
>
>
>
>------------------------------------------------------------------------------
>rhui (cds) => q
>[root@rhua ~]#

Actions: View

Attachments on bug 860117: 616810 | 616811 | 616812 | 618204 | 618205