Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
File:                     0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer (raw, json)
Hash identifier:          bv5TLTqo4DrCsDya59nIzSmQ4mFHNaB556hf9mmNVGU=
Subject key identifier:   0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       4900AD012AFF1F752739C34D24DF4B884CC8BAE4
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 06 Feb 2026 22:01:53 +0000
Certificate not after:    Fri 05 Feb 2027 22:06:53 +0000
Subordinate resources:    IP: 2a0a:6040:1100::/40
                          IP: 2a0a:6040:3f00::/40
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Feb 2026 04:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:ad:01:2a:ff:1f:75:27:39:c3:4d:24:df:4b:88:4c:c8:ba:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Feb  6 22:01:53 2026 GMT
            Not After : Feb  5 22:06:53 2027 GMT
        Subject: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:cc:39:9b:0e:79:9c:82:2a:2b:88:05:dd:
                    c3:8f:28:a0:df:83:a7:bb:dd:3d:43:34:ab:12:83:
                    e6:b3:16:3a:c4:a5:3e:7a:9c:7e:57:48:aa:d7:cf:
                    d4:6b:f4:13:05:b1:ad:7b:6f:fc:00:bb:8c:07:e0:
                    68:e4:d5:44:4e:18:b0:b8:4d:e7:ac:24:62:b6:1f:
                    37:f2:ac:e8:b9:0a:c5:7a:e7:9d:65:db:63:4e:98:
                    7b:c7:45:75:45:9a:0e:04:a7:f6:18:87:c1:82:5c:
                    d0:b8:f3:fb:99:66:69:0a:98:b2:32:bd:3c:ca:f0:
                    4a:be:83:bb:f3:80:90:d3:d4:6e:5c:9e:c3:c4:dc:
                    29:fc:f2:8a:49:a8:02:c2:67:55:20:11:f9:ac:12:
                    b4:1c:a7:01:ba:5c:24:84:9a:b2:17:84:2f:4b:d5:
                    9a:38:9d:dc:85:6b:d6:b9:56:e6:d6:98:95:bd:6e:
                    f5:be:35:a2:51:38:a0:04:33:f8:2c:43:8c:e4:57:
                    39:20:fa:19:12:d5:3e:2c:44:80:98:bc:83:93:83:
                    98:fc:29:82:2a:85:76:e7:3b:62:35:73:b4:86:d0:
                    63:7b:30:9b:90:dd:a6:3a:d7:9c:ae:85:23:46:ed:
                    05:f0:41:8d:e4:cb:b1:9c:4a:9e:67:f4:02:10:ba:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1100::/40
                  2a0a:6040:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:41:dc:49:f4:49:41:be:2b:ba:da:2d:26:f3:34:44:ee:
         dd:4b:da:18:19:79:35:a5:30:07:7f:1d:53:5b:ef:69:bd:bc:
         06:ab:8f:4f:da:81:4f:e2:39:34:f9:d5:d6:d8:b9:2b:28:41:
         07:88:ef:21:79:d8:6a:84:fc:06:59:64:74:df:92:79:ba:04:
         84:19:da:1c:e0:8a:12:f7:2c:cc:48:92:c2:53:4b:76:ae:58:
         80:c9:ea:01:f7:73:16:34:7c:0c:90:7d:f3:11:e5:82:26:d7:
         01:8f:e8:8b:72:e7:3e:86:cb:6e:e9:38:37:87:f2:d8:3b:20:
         b1:eb:a3:b5:54:f8:0b:83:da:ca:7d:97:ac:4e:58:1b:30:29:
         21:51:4b:6a:1f:a1:60:17:4a:3e:73:cb:12:46:26:63:07:ce:
         dd:3b:ae:59:5a:a1:fa:0b:5c:d1:f1:15:25:d3:0d:1d:e2:5c:
         61:7a:27:c9:bc:e4:04:c9:21:5d:95:aa:c8:eb:e0:d8:d5:32:
         db:2c:ed:e4:28:c4:51:e4:f6:b1:b8:e4:5b:e3:10:5b:5b:01:
         13:c4:35:73:ff:ad:a0:a3:05:6f:9a:cc:4d:d6:d2:b0:73:85:
         2f:99:6c:8d:ce:83:d7:94:03:1e:ed:7d:98:50:2f:1d:62:30:
         a8:59:f0:b9
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgIUSQCtASr/H3UnOcNNJN9LiEzIuuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjAyMDYyMjAxNTNaFw0yNzAyMDUyMjA2NTNaMDMxMTAvBgNV
BAMTKDBCM0I2OEEyMDZCNkFGODRBMzRBQTFCNzYzMkU5OUFCMDZGNTIwNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+cw5mw55nIIqK4gF3cOPKKDf
g6e73T1DNKsSg+azFjrEpT56nH5XSKrXz9Rr9BMFsa17b/wAu4wH4Gjk1UROGLC4
TeesJGK2HzfyrOi5CsV6551l22NOmHvHRXVFmg4Ep/YYh8GCXNC48/uZZmkKmLIy
vTzK8Eq+g7vzgJDT1G5cnsPE3Cn88opJqALCZ1UgEfmsErQcpwG6XCSEmrIXhC9L
1Zo4ndyFa9a5VubWmJW9bvW+NaJROKAEM/gsQ4zkVzkg+hkS1T4sRICYvIOTg5j8
KYIqhXbnO2I1c7SG0GN7MJuQ3aY615yuhSNG7QXwQY3ky7GcSp5n9AIQulP5AgMB
AAGjggL3MIIC8zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLO2iiBravhKNK
obdjLpmrBvUgdzAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV
HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl
cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy
MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw
gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG
M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAUIGCCsGAQUFBwEL
BIIBNDCCATAwYAYIKwYBBQUHMAWGVHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFm
ZDJiZTRlLzEwLzCBjQYIKwYBBQUHMAqGgYByc3luYzovL3JzeW5jLnBhYXMucnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5
Y2QxZmQyYmU0ZS8xMC8wQjNCNjhBMjA2QjZBRjg0QTM0QUExQjc2MzJFOTlBQjA2
RjUyMDc3Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5y
aXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqCmBAEQMGACoKYEA/MA0G
CSqGSIb3DQEBCwUAA4IBAQBIukHcSfRJQb4rutotJvM0RO7dS9oYGXk1pTAHfx1T
W+9pvbwGq49P2oFP4jk0+dXW2LkrKEEHiO8hedhqhPwGWWR035J5ugSEGdoc4IoS
9yzMSJLCU0t2rliAyeoB93MWNHwMkH3zEeWCJtcBj+iLcuc+hstu6Tg3h/LYOyCx
66O1VPgLg9rKfZesTlgbMCkhUUtqH6FgF0o+c8sSRiZjB87dO65ZWqH6C1zR8RUl
0w0d4lxheifJvOQEySFdlarI6+DY1TLbLO3kKMRR5PaxuORb4xBbWwETxDVz/62g
owVvmsxN1tKwc4UvmWyNzoPXlAMe7X2YUC8dYjCoWfC5
-----END CERTIFICATE-----
Generated at Mon Feb 23 11:37:35 2026 by rpki-client