Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
File:                     8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer (raw, json)
Hash identifier:          1s3w/2uuBHDD+v3cG3JNa6FO8Op6pXuwy7JWd70ALsY=
Subject key identifier:   8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       419D1CA03B7C344A1078FDD00084DBF6DC304E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Fri 04 Jul 2025 06:47:49 +0000
Certificate not after:    Fri 03 Jul 2026 06:52:49 +0000
Subordinate resources:    IP: 2a05:dfc1::/32
                          IP: 2a06:9f80::/29
                          IP: 2a0a:6040::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9d:1c:a0:3b:7c:34:4a:10:78:fd:d0:00:84:db:f6:dc:30:4e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  4 06:47:49 2025 GMT
            Not After : Jul  3 06:52:49 2026 GMT
        Subject: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bc:92:de:9b:59:bb:54:2b:b7:b0:bc:96:40:
                    4a:4b:1a:08:d3:e3:49:d1:c3:c6:a5:17:e2:61:d7:
                    c1:c5:07:6d:55:4d:d5:47:51:ec:ba:5a:45:24:70:
                    05:58:95:a5:30:1b:d2:a4:61:60:c0:c4:6c:24:78:
                    b1:4b:43:8a:b0:eb:91:30:bf:94:38:86:e2:2b:91:
                    46:fa:99:62:c1:df:ee:77:7a:e4:f4:20:37:38:e8:
                    80:a5:bb:d3:ca:1b:d0:31:12:fb:85:b7:01:22:15:
                    da:70:1a:b4:4f:58:8c:0f:6d:8f:c9:65:1c:94:42:
                    14:79:45:01:84:95:31:54:9e:dd:d9:28:93:40:e1:
                    54:12:b7:1b:b3:34:86:8e:8d:3b:74:bb:38:de:64:
                    73:97:1f:21:58:80:5f:3e:89:b4:ad:86:76:f9:16:
                    11:8f:5a:4d:d0:5b:8e:92:67:81:bc:86:37:33:f7:
                    ff:d5:ea:a8:dc:19:5e:50:84:2a:02:d4:a9:76:b1:
                    3b:62:aa:42:eb:a4:2f:5f:24:82:fa:49:40:ca:3f:
                    7d:6a:20:7d:a7:12:75:26:92:f1:83:f1:d6:72:ab:
                    18:83:da:b1:3b:1b:0e:0f:1d:d6:d2:2d:7b:06:b7:
                    0a:af:a7:81:d2:cb:77:24:0e:2d:96:d1:97:b6:57:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/32
                  2a06:9f80::/29
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:61:0e:a7:b0:25:cb:a8:01:5a:21:35:7f:08:c3:c9:7d:3f:
         a6:d4:97:31:78:06:d9:c3:57:f6:e4:42:56:8f:60:52:3e:38:
         0e:ae:d0:1c:65:ac:f5:3d:6e:f3:30:23:cc:e0:39:4d:fc:e4:
         5e:6e:90:b8:e8:fc:dd:00:b4:1c:cb:8a:8e:16:d7:2a:d9:4e:
         e7:4d:58:d6:5d:ef:59:bd:4f:7a:d0:0c:7b:88:f3:0c:81:0e:
         c1:a8:96:9b:56:6a:86:ed:13:61:f4:c8:71:00:54:c1:87:01:
         1f:2b:bf:66:82:75:c0:22:30:17:ef:5d:98:29:74:49:a4:c3:
         95:83:25:b6:c0:83:41:17:38:b7:2a:fa:86:d5:69:af:86:2f:
         2d:c6:e3:b5:13:7e:47:df:61:2d:7d:72:58:e0:97:6c:a3:e9:
         d3:a1:63:e5:23:cc:e4:00:a7:55:06:c2:d4:f6:c5:8d:db:7a:
         cc:1b:0b:a0:42:d0:81:f3:9e:25:8d:94:46:90:6d:15:69:65:
         94:79:e4:d2:2f:a6:5e:91:84:98:cb:b4:79:ff:1a:ed:2e:35:
         7f:b4:07:73:c7:24:58:8d:4e:27:8f:de:ec:25:4f:18:90:d2:
         f9:08:00:cd:93:a0:1f:cb:e1:40:06:e2:a4:2b:c7:30:f4:3d:
         f8:f0:af:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:59:47 2025 by rpki-client