Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
File:                     553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer (raw, json)
Hash identifier:          8hUHf0CCm8ncM6rbXm3frEBYvSAMN2FzyEkmz99Xw0o=
Subject key identifier:   55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer:       /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial:       1A24A64DB6BC00D6CB6C37764CFBD4F213053FEB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 06 Jun 2026 01:11:34 +0000
Certificate not after:    Sat 05 Jun 2027 01:16:34 +0000
Subordinate resources:    IP: 2a0a:6040:db00::/40
Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:24:a6:4d:b6:bc:00:d6:cb:6c:37:76:4c:fb:d4:f2:13:05:3f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Validity
            Not Before: Jun  6 01:11:34 2026 GMT
            Not After : Jun  5 01:16:34 2027 GMT
        Subject: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:7c:7f:72:0c:a9:a2:f2:a2:6d:05:4a:2b:
                    51:92:aa:43:26:9b:3d:37:b2:e7:da:92:31:8f:41:
                    39:69:03:07:6c:44:09:c3:3d:2d:91:e8:a4:72:3e:
                    27:57:65:d6:2a:02:7d:e2:d1:78:2b:80:08:b3:7b:
                    16:c4:f4:06:06:04:56:3d:70:e2:d5:20:8b:87:5a:
                    eb:c5:93:5d:80:14:c3:e5:c7:44:7a:d6:28:55:b3:
                    46:8d:a1:56:a2:7f:72:17:b0:0a:25:a0:ba:91:9e:
                    2b:72:75:20:9a:e9:33:7f:65:9d:e3:0a:73:87:d6:
                    1d:5e:97:ed:d9:e7:dc:43:3e:57:80:a9:9e:0a:3e:
                    26:f8:4e:1b:50:52:23:05:6e:5d:b1:0f:0d:62:e6:
                    b1:ad:5e:54:ee:fc:19:c5:26:17:5e:9a:65:ae:fa:
                    48:80:7a:8d:70:a3:cb:a7:e3:c9:87:81:e6:dd:63:
                    d8:77:f1:ca:5e:83:b3:4f:f3:03:59:95:7d:54:aa:
                    65:6d:41:17:56:26:3f:2d:4e:a4:7d:d6:13:0f:39:
                    bd:35:ec:6e:30:3e:1b:6c:4f:c7:1a:f5:fd:cf:a2:
                    53:4f:98:cc:a2:f7:ca:5b:f5:85:a5:49:7c:68:e9:
                    75:ed:36:80:61:af:bb:18:04:a7:db:b1:d3:08:cb:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
            X509v3 Authority Key Identifier:
                keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:ae:83:b0:73:1c:f6:08:0b:9e:e6:58:93:55:bb:7f:9e:
         a0:72:0a:db:e5:93:fa:e6:7f:b5:35:50:c7:5d:ff:6f:a3:56:
         6f:ad:75:78:2d:46:b3:ee:78:71:36:26:a0:c5:d2:73:ee:84:
         8e:99:15:b4:ac:d4:a6:32:9b:79:f7:c8:c0:d2:2b:54:53:ba:
         b8:9b:24:d2:97:ce:22:06:91:3f:1f:9a:9e:55:9d:c4:30:66:
         f8:5c:51:5a:1f:1c:b8:fa:31:cd:9e:ed:7c:e5:60:ef:99:4e:
         b7:9b:79:7f:9b:bf:f0:0c:1d:ec:89:5a:9d:8a:a0:a4:21:d7:
         93:ea:3c:16:9b:2e:1e:c4:ed:bd:78:df:44:62:a1:77:25:64:
         ff:3f:23:4e:22:a9:80:98:0b:89:00:27:35:99:e4:9e:c6:0f:
         fd:16:12:96:0a:96:4e:81:bb:54:f0:b8:27:fb:82:96:cc:9d:
         b5:b8:fa:d1:c4:46:98:5b:90:db:a7:b6:18:e5:75:54:71:7a:
         29:6f:43:ac:64:cc:9e:aa:f3:87:86:68:b0:ea:ec:27:bc:35:
         5f:cc:ce:69:50:9a:6c:aa:34:45:8d:d6:24:bf:f0:a6:cc:cb:
         fd:29:16:6b:15:85:03:3a:fd:46:e0:14:2c:21:c2:6b:47:da:
         59:e7:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:06:46 2026 by rpki-client