Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer
File:                     85F2469BD62AF070F48839CBBB5D9B8085BDADF1.cer (raw, json)
Hash identifier:          0sWiW0j7K5GuVcE8rU67lY0ShPl1XbdIDlUAsApcVr4=
Subject key identifier:   85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       082A68977DE2F5C61182DA358A5E7AD4A73D5B82
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest:                 rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.mft
caRepository:             rsync://rpki.cc/repo/BerryByte/2/
Notify URL:               https://rpki.cc/rrdp/notification.xml
Certificate not before:   Fri 04 Jul 2025 08:53:11 +0000
Certificate not after:    Fri 03 Jul 2026 08:58:11 +0000
Subordinate resources:    IP: 2a0a:6040:b000::/40
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2a:68:97:7d:e2:f5:c6:11:82:da:35:8a:5e:7a:d4:a7:3d:5b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 08:53:11 2025 GMT
            Not After : Jul  3 08:58:11 2026 GMT
        Subject: CN=85F2469BD62AF070F48839CBBB5D9B8085BDADF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:e7:19:96:df:34:6d:48:04:12:4b:f0:eb:
                    a6:70:46:de:e4:8d:72:6c:88:ee:13:bb:ee:52:c0:
                    0e:57:49:17:af:8f:3f:3f:6c:2c:62:37:cf:22:2d:
                    9a:7d:5e:1f:43:93:65:af:72:17:24:74:19:fd:4b:
                    d9:b5:37:d0:38:c0:8b:46:94:6f:5d:43:3d:3a:9e:
                    36:29:b6:80:90:1a:91:08:96:7f:51:be:fc:76:43:
                    7f:6c:02:77:2b:66:0b:a2:0d:8c:31:61:8d:19:14:
                    ec:c3:df:2a:ca:a5:0a:b5:af:1b:8a:e7:70:f5:fe:
                    86:2a:54:65:90:6a:0c:e0:d3:82:77:3d:e3:00:01:
                    d9:16:d5:77:58:40:c2:e9:e6:a4:33:9d:39:38:12:
                    89:33:99:cd:99:e5:4c:11:05:e9:62:a9:61:af:fe:
                    82:b7:26:b9:9a:89:2e:c2:54:a6:69:de:a8:a5:74:
                    09:76:2b:5f:84:ab:f2:0b:94:ee:01:6c:92:14:94:
                    c1:96:21:7b:25:55:39:0f:15:18:7a:81:28:8d:0f:
                    70:36:72:2e:0b:90:91:4c:33:69:25:02:a7:03:c2:
                    4e:06:78:a0:f8:ee:b9:f4:f7:fa:f0:c6:25:20:ad:
                    f2:d9:e5:55:87:7e:94:dc:95:30:ba:fb:d8:6b:2e:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:F2:46:9B:D6:2A:F0:70:F4:88:39:CB:BB:5D:9B:80:85:BD:AD:F1
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.cc/repo/BerryByte/2/
                RPKI Manifest - URI:rsync://rpki.cc/repo/BerryByte/2/85F2469BD62AF070F48839CBBB5D9B8085BDADF1.mft
                RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:0b:a1:7a:90:4c:84:fd:6f:03:1a:22:2d:ca:f9:a3:db:9f:
         dd:6f:e2:28:6e:97:79:b3:f7:6d:79:89:4c:30:e2:e4:ed:fb:
         09:59:47:2f:c4:6e:3d:61:9d:04:d1:ce:e1:c5:d4:c9:84:f7:
         3f:a2:45:6b:2b:ee:0e:88:96:04:73:5a:78:43:ce:5b:b5:cd:
         ff:14:67:3c:95:26:77:09:eb:2b:8d:65:36:29:4c:ba:df:03:
         1b:1a:75:32:7f:5d:32:da:95:32:46:ca:15:ff:b1:3e:1a:f7:
         06:c1:a8:30:0f:57:f5:9c:3d:ec:4b:99:d1:77:01:34:f5:e1:
         66:c3:56:a4:9e:9b:ec:a7:e2:25:2e:e4:12:3c:e3:0d:48:73:
         f4:e5:42:e0:1b:55:44:60:41:d7:c5:99:89:43:33:61:03:09:
         2f:4a:99:67:ce:b7:2d:87:64:83:76:d3:4b:f0:ee:07:74:b0:
         23:b0:d5:00:e8:49:73:cc:45:eb:f0:7a:0e:27:e4:b2:29:e0:
         cd:9d:24:27:ff:c7:95:53:be:49:e1:01:8c:2d:96:5d:36:d5:
         7c:18:3b:10:5f:2c:ca:7c:2d:7c:f1:ce:59:57:23:bc:55:df:
         47:50:23:b5:de:81:49:e0:8a:78:fc:35:57:c1:3e:d6:e7:cc:
         61:af:c7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:28:44 2025 by rpki-client