Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
File:                     BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer (raw, json)
Hash identifier:          3kK5Go3mI3chRjYiWUnbiCAHYq7Np5D3VvgN2175+fM=
Subject key identifier:   BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       78D857C2CAEA7F0F9BEB6EA2C39121A256B495B3
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest:                 rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
caRepository:             rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/
Notify URL:               https://krill.accuristechnologies.ca/rrdp/notification.xml
Certificate not before:   Fri 04 Jul 2025 15:23:15 +0000
Certificate not after:    Fri 03 Jul 2026 15:28:15 +0000
Subordinate resources:    IP: 2a0a:6040:1500::/40
                          IP: 2a0a:6040:6d00::/40
                          IP: 2a0a:6040:c500::/40
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d8:57:c2:ca:ea:7f:0f:9b:eb:6e:a2:c3:91:21:a2:56:b4:95:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jul  4 15:23:15 2025 GMT
            Not After : Jul  3 15:28:15 2026 GMT
        Subject: CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:ee:f9:11:d4:ac:8d:52:0b:27:03:e5:b2:
                    d4:cd:48:a5:b5:e7:f0:7e:f7:fa:9e:6c:3f:13:0e:
                    c8:79:1c:2f:bc:82:6c:51:2a:49:89:88:dc:d8:97:
                    f2:15:f3:a3:88:5a:11:e9:ec:b2:e0:35:e5:c8:5e:
                    8d:02:9f:f7:1a:de:c5:68:7b:cb:9b:e3:f7:1d:55:
                    a4:ae:30:49:f6:b9:89:f4:6f:6b:c3:12:d6:de:02:
                    a0:2c:53:04:da:30:0a:7e:cd:25:53:00:e4:63:fb:
                    f4:c5:2c:b6:33:0f:92:68:8e:6c:5c:a2:4e:9c:c7:
                    dd:bf:7e:ed:9c:25:90:4c:ef:75:84:4c:80:59:0e:
                    ad:dc:1e:05:b6:10:ef:b1:29:10:00:07:6d:ae:c7:
                    16:7f:69:b5:57:cf:d2:36:2d:82:92:c3:c5:33:87:
                    0c:4a:cb:11:15:dd:cf:d3:0b:e3:12:c6:a2:11:2d:
                    0c:4b:77:29:d3:25:d4:d2:fb:70:a5:0f:69:e2:15:
                    f7:8b:a3:4a:2d:7a:b8:09:8b:52:d4:03:8c:bd:14:
                    7f:7d:c1:a1:ca:07:4b:72:06:0c:43:3e:33:68:26:
                    99:3f:64:ce:a3:4b:70:99:c7:74:91:d1:06:7a:5a:
                    98:b9:54:a9:3b:3a:52:00:22:91:79:30:2d:d4:e4:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/
                RPKI Manifest - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
                RPKI Notify - URI:https://krill.accuristechnologies.ca/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1500::/40
                  2a0a:6040:6d00::/40
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:c8:76:8b:03:5c:c3:be:6a:10:61:44:92:cd:8d:bb:df:22:
         34:bb:f5:18:dd:6c:89:c6:73:8f:08:10:8b:0e:bc:07:e6:9f:
         ae:aa:44:7f:af:10:e3:04:bf:9f:95:63:c7:0c:34:89:a5:95:
         83:e6:3f:d2:67:11:79:cf:52:ad:a5:13:8d:6d:69:2c:82:90:
         6a:10:f1:38:c7:e3:83:e5:aa:a1:d3:83:14:f8:92:90:e9:d9:
         4b:1f:79:62:60:b1:aa:6b:76:f3:40:60:c6:a8:59:a8:cb:b5:
         04:95:36:76:61:46:bf:80:68:29:ad:d9:d9:25:e8:8b:bd:f1:
         cb:04:1b:25:92:df:8a:49:cb:fc:f7:cc:0e:4a:39:d5:cb:a7:
         78:e3:90:40:f9:c3:db:fe:44:2a:e7:4a:a2:b6:22:ef:4b:3c:
         02:b1:61:6b:d2:02:da:ee:60:28:fd:6e:53:be:03:55:3f:46:
         65:6f:1f:ef:c6:af:ed:62:f1:d2:68:35:5c:50:7d:a7:72:27:
         47:92:22:44:89:ed:61:57:07:03:e0:b2:b6:ea:1e:77:e7:98:
         34:67:4e:a5:af:25:8e:18:1b:16:4b:2a:97:8c:f3:a5:ac:2d:
         aa:41:e3:10:ac:eb:ed:83:45:0d:f7:82:a0:1d:69:ef:49:09:
         6e:98:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:27:50 2025 by rpki-client