Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
File:                     B729F0C7BF295C6844FD328B324A1ED8598032F9.cer (raw, json)
Hash identifier:          Uorb0EOSc/Jn2PJYdnDZTdcWl3sAK9SrDHee0P+cfHg=
Subject key identifier:   B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       7C087683928A40150AF22C282F8CC6217DC0325E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 04 Jul 2025 18:52:55 +0000
Certificate not after:    Fri 03 Jul 2026 18:57:55 +0000
Subordinate resources:    IP: 2a05:dfc1:8200::/40
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:08:76:83:92:8a:40:15:0a:f2:2c:28:2f:8c:c6:21:7d:c0:32:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 18:52:55 2025 GMT
            Not After : Jul  3 18:57:55 2026 GMT
        Subject: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:62:42:17:40:5e:e5:b1:ca:4a:44:51:e4:fb:
                    34:21:34:bd:2c:ac:49:48:d3:df:af:dd:a4:4d:a5:
                    45:0f:b8:cc:4c:3b:ea:05:7b:ac:0b:9a:f7:b4:ad:
                    d7:9f:1d:13:f4:db:68:0e:7d:44:38:8b:f7:84:bf:
                    71:6f:90:e3:70:ec:5e:d6:75:71:45:d8:6c:23:b8:
                    15:98:9b:44:12:17:6a:84:b5:b8:c9:d9:65:b9:b1:
                    f3:9d:c6:bd:5e:01:1a:79:da:4c:a5:31:04:12:49:
                    fa:47:0c:04:c3:ce:77:59:17:a3:2b:7c:4c:b8:a3:
                    f0:e5:87:8b:d0:8e:a4:f2:70:7e:49:46:6f:a1:45:
                    bc:93:2f:65:6a:05:6f:2a:8a:1c:f4:c4:63:e0:d1:
                    ff:f2:4d:93:c0:95:1d:74:f1:6e:3e:d5:d4:a1:7e:
                    18:3a:c9:90:a2:bf:fa:d3:74:bd:96:de:0f:2a:52:
                    de:2d:e7:de:c9:64:c9:55:63:99:18:91:ef:a6:c0:
                    62:00:b1:bd:8a:0f:c9:59:b1:38:2f:08:00:51:10:
                    fc:4d:0d:49:04:20:cc:b0:21:72:b9:5f:ad:11:8a:
                    5f:3b:33:13:a6:cf:f5:67:fc:32:d1:a5:a7:91:db:
                    bd:6d:f4:a6:de:59:84:81:28:ec:ae:8f:33:05:e1:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:b4:92:2c:27:b5:5b:b8:0e:d8:18:58:93:45:82:1a:72:0a:
         31:22:7e:75:22:f3:77:e0:76:cc:e4:58:62:3c:33:66:ef:51:
         59:5e:16:09:7b:7d:a4:54:7c:63:58:f2:50:ed:41:d7:99:f3:
         e8:b9:20:55:c0:65:ec:5b:78:0f:79:87:09:2f:53:4a:31:95:
         13:4a:33:8e:ae:1e:9b:2c:dc:09:ac:6e:e0:ba:fd:8f:5a:ba:
         2b:00:56:46:b8:89:61:c5:eb:86:34:ad:bd:a9:7b:77:af:45:
         a6:58:f5:f8:ef:dc:e8:2f:94:bf:e9:48:a3:c7:59:30:fe:c9:
         ac:57:a4:f0:4a:8b:a7:6d:5b:a5:0e:ae:c8:a0:17:dc:d9:4b:
         5c:1c:9a:a7:6d:7d:42:fd:df:84:00:40:92:f4:a7:94:a5:e0:
         78:42:f3:a6:a4:3c:43:cb:2a:79:ef:b0:d6:f6:18:43:09:63:
         2d:c8:39:b8:cf:c6:c6:e6:7a:59:02:8f:8a:6b:24:d9:3b:1d:
         91:22:13:4f:f0:51:2e:54:47:1f:66:50:9a:03:79:17:54:2f:
         2a:06:22:8a:49:22:c3:66:33:19:d7:7b:79:f0:4e:f0:33:c5:
         be:a9:2c:b0:44:2d:f6:60:5d:0b:f4:d9:b5:17:16:1e:81:81:
         9a:f0:40:e9
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgIUfAh2g5KKQBUK8iwoL4zGIX3AMl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNTA3MDQxODUyNTVaFw0yNjA3MDMxODU3NTVaMDMxMTAvBgNV
BAMTKEI3MjlGMEM3QkYyOTVDNjg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeYkIXQF7lscpKRFHk+zQhNL0s
rElI09+v3aRNpUUPuMxMO+oFe6wLmve0rdefHRP022gOfUQ4i/eEv3FvkONw7F7W
dXFF2GwjuBWYm0QSF2qEtbjJ2WW5sfOdxr1eARp52kylMQQSSfpHDATDzndZF6Mr
fEy4o/Dlh4vQjqTycH5JRm+hRbyTL2VqBW8qihz0xGPg0f/yTZPAlR108W4+1dSh
fhg6yZCiv/rTdL2W3g8qUt4t597JZMlVY5kYke+mwGIAsb2KD8lZsTgvCABREPxN
DUkEIMywIXK5X60Ril87MxOmz/Vn/DLRpaeR271t9KbeWYSBKOyujzMF4XozAgMB
AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3KfDHvylcaET9
MosySh7YWYAy+TAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV
HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl
cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy
MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw
gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG
M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL
BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVk
MTNkOGVmLzMvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS83MmM0MDVmMS1jMzJkLTQ3Y2UtODk0My0wNzUy
ZWQxM2Q4ZWYvMy9CNzI5RjBDN0JGMjk1QzY4NDRGRDMyOEIzMjRBMUVEODU5ODAz
MkY5Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl
Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BgjANBgkqhkiG9w0BAQsF
AAOCAQEAXrSSLCe1W7gO2BhYk0WCGnIKMSJ+dSLzd+B2zORYYjwzZu9RWV4WCXt9
pFR8Y1jyUO1B15nz6LkgVcBl7Ft4D3mHCS9TSjGVE0ozjq4emyzcCaxu4Lr9j1q6
KwBWRriJYcXrhjStval7d69Fplj1+O/c6C+Uv+lIo8dZMP7JrFek8EqLp21bpQ6u
yKAX3NlLXByap219Qv3fhABAkvSnlKXgeELzpqQ8Q8sqee+w1vYYQwljLcg5uM/G
xuZ6WQKPimsk2TsdkSITT/BRLlRHH2ZQmgN5F1QvKgYiikkiw2YzGdd7efBO8DPF
vqkssEQt9mBdC/TZtRcWHoGBmvBA6Q==
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:20:05 2025 by rpki-client