Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
File:                     B729F0C7BF295C6844FD328B324A1ED8598032F9.cer (raw, json)
Hash identifier:          PK4xEzzGOyu/Xc7NE3aXOjUB5i7YM9ph5Jd0tq67RGs=
Subject key identifier:   B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       37415FF112EE72736DCFC2EE34540F14D515041C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 06 Jun 2026 06:57:18 +0000
Certificate not after:    Sat 05 Jun 2027 07:02:18 +0000
Subordinate resources:    IP: 2a05:dfc1:8200::/40
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:41:5f:f1:12:ee:72:73:6d:cf:c2:ee:34:54:0f:14:d5:15:04:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  6 06:57:18 2026 GMT
            Not After : Jun  5 07:02:18 2027 GMT
        Subject: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:62:42:17:40:5e:e5:b1:ca:4a:44:51:e4:fb:
                    34:21:34:bd:2c:ac:49:48:d3:df:af:dd:a4:4d:a5:
                    45:0f:b8:cc:4c:3b:ea:05:7b:ac:0b:9a:f7:b4:ad:
                    d7:9f:1d:13:f4:db:68:0e:7d:44:38:8b:f7:84:bf:
                    71:6f:90:e3:70:ec:5e:d6:75:71:45:d8:6c:23:b8:
                    15:98:9b:44:12:17:6a:84:b5:b8:c9:d9:65:b9:b1:
                    f3:9d:c6:bd:5e:01:1a:79:da:4c:a5:31:04:12:49:
                    fa:47:0c:04:c3:ce:77:59:17:a3:2b:7c:4c:b8:a3:
                    f0:e5:87:8b:d0:8e:a4:f2:70:7e:49:46:6f:a1:45:
                    bc:93:2f:65:6a:05:6f:2a:8a:1c:f4:c4:63:e0:d1:
                    ff:f2:4d:93:c0:95:1d:74:f1:6e:3e:d5:d4:a1:7e:
                    18:3a:c9:90:a2:bf:fa:d3:74:bd:96:de:0f:2a:52:
                    de:2d:e7:de:c9:64:c9:55:63:99:18:91:ef:a6:c0:
                    62:00:b1:bd:8a:0f:c9:59:b1:38:2f:08:00:51:10:
                    fc:4d:0d:49:04:20:cc:b0:21:72:b9:5f:ad:11:8a:
                    5f:3b:33:13:a6:cf:f5:67:fc:32:d1:a5:a7:91:db:
                    bd:6d:f4:a6:de:59:84:81:28:ec:ae:8f:33:05:e1:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:1e:87:c1:1e:f7:e1:69:b2:29:de:ee:18:9c:5a:78:a6:d9:
         44:5a:e1:3e:6e:2e:6f:91:e7:3d:b8:8a:2f:10:d6:7e:40:29:
         0b:73:3c:86:a4:b3:fb:b7:3a:50:59:99:66:f6:de:40:07:f8:
         3c:29:b4:3b:ad:e8:cc:f7:86:72:f5:21:3c:eb:7f:87:90:81:
         d6:c2:a7:9f:d6:ae:12:b6:89:aa:ce:26:a6:a1:5d:e9:aa:11:
         0a:18:50:36:0c:49:e6:65:a2:3f:ca:00:ac:97:95:19:50:13:
         b2:69:5d:06:27:7c:21:88:dc:f7:f7:a7:76:58:f9:b1:79:17:
         57:7b:97:8c:f0:f7:1e:d0:16:10:df:fe:f6:49:ae:e0:d1:c6:
         4a:8d:2a:61:2c:8e:60:fd:50:98:49:a0:18:6f:d3:48:6c:08:
         31:5e:74:3c:66:9d:8b:b7:6b:5c:94:63:67:94:5f:f6:5b:3f:
         cf:8e:96:eb:88:e5:4c:be:6e:76:15:de:4d:cc:b0:0a:74:40:
         ad:da:9b:ae:c9:d3:eb:01:3f:dd:45:9e:83:29:8c:3e:05:9d:
         a9:0e:a2:32:39:b4:61:f0:cd:03:fb:c8:f8:cc:61:b9:ec:f7:
         dd:aa:cb:32:3e:96:3b:67:50:e3:6a:a4:14:6d:df:a6:64:0f:
         5d:ff:f9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:56:09 2026 by rpki-client