Certificate

$ rpki-client -vvvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer
File:                     BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.cer (raw, json)
Hash identifier:          R+aHiK7xcK4uaqnIoUwUOxtvSCcQ1cutv+HT0PyY6UU=
Subject key identifier:   BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       435CF562232D62EC35CF92484BA398651CBD8D87
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Fri 09 Oct 2026 06:26:39 +0000
Certificate not after:    Fri 08 Oct 2027 06:31:39 +0000
Subordinate resources:    IP: 2a06:9f80::/29
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5c:f5:62:23:2d:62:ec:35:cf:92:48:4b:a3:98:65:1c:bd:8d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Oct  9 06:26:39 2026 GMT
            Not After : Oct  8 06:31:39 2027 GMT
        Subject: CN=BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:53:7e:f7:2b:00:c3:46:48:0f:d5:47:dd:
                    13:ae:f9:c9:8e:79:a3:ff:51:34:d4:f0:c8:cb:01:
                    d7:df:d0:04:6d:0c:9f:ba:c9:c0:7a:cb:58:73:44:
                    f5:9f:37:65:5e:ff:59:1f:d7:1a:71:f1:a2:d9:37:
                    30:da:0b:bf:10:35:ac:7b:b0:8c:0a:27:7e:06:3f:
                    06:3b:e2:78:6d:63:4f:55:9e:f4:d6:0d:a3:bb:58:
                    2c:5a:af:77:54:8f:10:d6:57:9c:a9:b7:c4:5e:29:
                    11:b4:bc:a4:5d:29:89:11:c2:b1:a2:0d:fb:fe:2e:
                    9d:b0:14:3a:94:ee:eb:bc:a4:78:cd:e0:6a:1b:fd:
                    83:31:ee:5a:90:ad:dd:b8:49:7f:f3:14:1f:c5:b0:
                    25:fa:d4:ab:1f:3c:25:ae:52:bd:8a:ae:61:64:a0:
                    c9:05:e6:22:01:52:a8:c1:cd:fd:84:ec:18:ec:5f:
                    44:c1:a4:57:f4:e3:19:d9:02:9d:86:73:71:eb:4a:
                    66:c3:90:c7:b0:46:b4:a6:ce:5d:cc:00:14:07:b1:
                    42:b2:76:8c:d8:d8:5a:d4:17:06:40:2a:51:73:d0:
                    34:ca:bf:e9:6f:27:a7:b6:ad:4a:07:49:94:95:98:
                    40:47:eb:28:07:11:7f:e0:ec:7f:c8:6c:ed:50:7c:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:8F:FC:85:C9:4D:66:F1:97:FE:39:C6:0C:7B:E5:E6:7D:20:DB:2D
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/XODOTECH/2/BB8FFC85C94D66F197FE39C60C7BE5E67D20DB2D.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         28:28:b9:27:dd:b8:34:7d:5b:06:54:cf:7d:9c:34:2e:8c:3c:
         6c:60:d9:32:74:61:d9:92:a9:4e:f5:39:e5:15:9d:19:d3:99:
         b5:35:2f:aa:4e:33:3f:f9:1e:86:44:4b:4f:ef:02:40:62:e7:
         f7:67:b4:4a:97:59:3c:81:80:f7:1c:06:e8:a3:36:ae:1d:30:
         e3:ef:71:a7:68:56:63:5d:db:ce:97:79:4c:2e:4c:cb:18:2f:
         eb:94:b2:ea:2e:c6:93:d3:b9:b9:24:a3:f9:fa:4b:92:33:11:
         3d:30:71:78:ce:7a:ef:48:86:6f:ec:40:30:7c:48:6a:e5:76:
         53:69:de:64:79:c2:ce:80:d7:22:90:4e:47:f5:30:47:7d:53:
         73:c7:fa:c9:20:70:69:64:1c:2a:4f:f5:a0:27:e7:9c:46:52:
         88:8c:5c:0d:66:18:77:41:7b:e7:4c:4c:4b:38:38:dd:9b:1f:
         38:6d:fb:92:e5:b2:a9:25:a7:eb:fd:48:74:3a:b6:d2:49:d8:
         6e:df:cd:f2:6f:35:d6:64:9d:3f:bb:e6:6e:0c:a3:09:92:04:
         3e:e1:06:56:87:2c:bb:d5:f2:d9:04:6f:b1:e5:b9:7a:62:87:
         d1:1e:02:9f:d3:e4:7e:c0:cf:2d:df:36:ae:9b:33:5e:ab:b7:
         c6:ae:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:17:04 2026 by rpki-client