
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer (raw, json)
Hash identifier: 8hUHf0CCm8ncM6rbXm3frEBYvSAMN2FzyEkmz99Xw0o=
Subject key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 1A24A64DB6BC00D6CB6C37764CFBD4F213053FEB
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 06 Jun 2026 01:11:34 +0000
Certificate not after: Sat 05 Jun 2027 01:16:34 +0000
Subordinate resources: IP: 2a0a:6040:db00::/40
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:24:a6:4d:b6:bc:00:d6:cb:6c:37:76:4c:fb:d4:f2:13:05:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 6 01:11:34 2026 GMT
Not After : Jun 5 01:16:34 2027 GMT
Subject: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:7c:7f:72:0c:a9:a2:f2:a2:6d:05:4a:2b:
51:92:aa:43:26:9b:3d:37:b2:e7:da:92:31:8f:41:
39:69:03:07:6c:44:09:c3:3d:2d:91:e8:a4:72:3e:
27:57:65:d6:2a:02:7d:e2:d1:78:2b:80:08:b3:7b:
16:c4:f4:06:06:04:56:3d:70:e2:d5:20:8b:87:5a:
eb:c5:93:5d:80:14:c3:e5:c7:44:7a:d6:28:55:b3:
46:8d:a1:56:a2:7f:72:17:b0:0a:25:a0:ba:91:9e:
2b:72:75:20:9a:e9:33:7f:65:9d:e3:0a:73:87:d6:
1d:5e:97:ed:d9:e7:dc:43:3e:57:80:a9:9e:0a:3e:
26:f8:4e:1b:50:52:23:05:6e:5d:b1:0f:0d:62:e6:
b1:ad:5e:54:ee:fc:19:c5:26:17:5e:9a:65:ae:fa:
48:80:7a:8d:70:a3:cb:a7:e3:c9:87:81:e6:dd:63:
d8:77:f1:ca:5e:83:b3:4f:f3:03:59:95:7d:54:aa:
65:6d:41:17:56:26:3f:2d:4e:a4:7d:d6:13:0f:39:
bd:35:ec:6e:30:3e:1b:6c:4f:c7:1a:f5:fd:cf:a2:
53:4f:98:cc:a2:f7:ca:5b:f5:85:a5:49:7c:68:e9:
75:ed:36:80:61:af:bb:18:04:a7:db:b1:d3:08:cb:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:db00::/40
Signature Algorithm: sha256WithRSAEncryption
75:bc:ae:83:b0:73:1c:f6:08:0b:9e:e6:58:93:55:bb:7f:9e:
a0:72:0a:db:e5:93:fa:e6:7f:b5:35:50:c7:5d:ff:6f:a3:56:
6f:ad:75:78:2d:46:b3:ee:78:71:36:26:a0:c5:d2:73:ee:84:
8e:99:15:b4:ac:d4:a6:32:9b:79:f7:c8:c0:d2:2b:54:53:ba:
b8:9b:24:d2:97:ce:22:06:91:3f:1f:9a:9e:55:9d:c4:30:66:
f8:5c:51:5a:1f:1c:b8:fa:31:cd:9e:ed:7c:e5:60:ef:99:4e:
b7:9b:79:7f:9b:bf:f0:0c:1d:ec:89:5a:9d:8a:a0:a4:21:d7:
93:ea:3c:16:9b:2e:1e:c4:ed:bd:78:df:44:62:a1:77:25:64:
ff:3f:23:4e:22:a9:80:98:0b:89:00:27:35:99:e4:9e:c6:0f:
fd:16:12:96:0a:96:4e:81:bb:54:f0:b8:27:fb:82:96:cc:9d:
b5:b8:fa:d1:c4:46:98:5b:90:db:a7:b6:18:e5:75:54:71:7a:
29:6f:43:ac:64:cc:9e:aa:f3:87:86:68:b0:ea:ec:27:bc:35:
5f:cc:ce:69:50:9a:6c:aa:34:45:8d:d6:24:bf:f0:a6:cc:cb:
fd:29:16:6b:15:85:03:3a:fd:46:e0:14:2c:21:c2:6b:47:da:
59:e7:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:06:46 2026 by rpki-client