Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
File:                     8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer (raw, json)
Hash identifier:          apb8zTOjDTUInV6S+0rgJDafQ4MVC3FLx2hodLP9ODI=
Subject key identifier:   8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       7D5488110F8A6B3280355CF868F81F406835DE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Sat 13 Jun 2026 03:42:53 +0000
Certificate not after:    Sat 12 Jun 2027 03:47:53 +0000
Subordinate resources:    IP: 2a05:dfc1::/32
                          IP: 2a06:9f80::/29
                          IP: 2a0a:6040::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:54:88:11:0f:8a:6b:32:80:35:5c:f8:68:f8:1f:40:68:35:de:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jun 13 03:42:53 2026 GMT
            Not After : Jun 12 03:47:53 2027 GMT
        Subject: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bc:92:de:9b:59:bb:54:2b:b7:b0:bc:96:40:
                    4a:4b:1a:08:d3:e3:49:d1:c3:c6:a5:17:e2:61:d7:
                    c1:c5:07:6d:55:4d:d5:47:51:ec:ba:5a:45:24:70:
                    05:58:95:a5:30:1b:d2:a4:61:60:c0:c4:6c:24:78:
                    b1:4b:43:8a:b0:eb:91:30:bf:94:38:86:e2:2b:91:
                    46:fa:99:62:c1:df:ee:77:7a:e4:f4:20:37:38:e8:
                    80:a5:bb:d3:ca:1b:d0:31:12:fb:85:b7:01:22:15:
                    da:70:1a:b4:4f:58:8c:0f:6d:8f:c9:65:1c:94:42:
                    14:79:45:01:84:95:31:54:9e:dd:d9:28:93:40:e1:
                    54:12:b7:1b:b3:34:86:8e:8d:3b:74:bb:38:de:64:
                    73:97:1f:21:58:80:5f:3e:89:b4:ad:86:76:f9:16:
                    11:8f:5a:4d:d0:5b:8e:92:67:81:bc:86:37:33:f7:
                    ff:d5:ea:a8:dc:19:5e:50:84:2a:02:d4:a9:76:b1:
                    3b:62:aa:42:eb:a4:2f:5f:24:82:fa:49:40:ca:3f:
                    7d:6a:20:7d:a7:12:75:26:92:f1:83:f1:d6:72:ab:
                    18:83:da:b1:3b:1b:0e:0f:1d:d6:d2:2d:7b:06:b7:
                    0a:af:a7:81:d2:cb:77:24:0e:2d:96:d1:97:b6:57:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/32
                  2a06:9f80::/29
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:05:84:e3:2d:e8:bc:a3:f2:8e:37:01:c7:15:8e:88:ba:12:
         17:f2:8c:e1:5a:e0:a4:7d:40:a2:e1:51:5c:f2:13:27:e0:d6:
         95:76:27:c8:99:43:d1:69:b3:64:6d:bd:cc:fe:90:3e:ec:63:
         43:e0:d3:95:20:73:eb:3c:3d:d0:cf:74:d8:ef:91:87:1e:5c:
         53:71:8c:32:3a:0c:f2:62:ce:b9:71:6d:ff:c5:c9:d1:3a:46:
         d6:5e:3b:8a:68:c9:2a:c4:95:66:82:5c:5b:86:0b:1a:9d:c2:
         cc:43:d6:c2:a3:ce:dd:a8:c4:02:45:ce:af:ee:20:d8:4f:bc:
         b6:7a:48:19:a6:b8:3f:fd:c0:83:63:bd:ae:c8:19:e1:a6:92:
         a3:7a:b5:1f:8d:2b:ba:bc:0f:89:cf:4f:c1:a2:a6:78:e4:da:
         12:56:ba:af:e8:ea:8b:3d:20:f0:64:56:3c:d4:86:87:05:bc:
         14:f9:93:c5:d1:a1:29:4b:02:de:c9:37:9c:cf:12:98:eb:a1:
         71:a7:b8:f9:fc:4f:ce:ea:f7:92:30:16:d4:d4:37:06:b8:b8:
         1b:42:89:cd:22:b2:8d:82:ca:ae:a6:d9:ff:37:36:40:e3:75:
         55:e9:ee:18:d4:8d:f7:37:7c:e4:90:2b:f1:6c:11:62:08:ba:
         d2:3b:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:26:40 2026 by rpki-client