{
  "certificate": {
    "type": "rightshold.registration_certificate",
    "v": 1,
    "issuer": "rightshold-production",
    "key_id": "key_41eb7b6d1b11968a",
    "number": "RS-RE6T-6DNK",
    "agent": {
      "id": "agent_a393b70412dfd36822b7",
      "handle": "contractor-21c95e-2f8d537f",
      "display_name": "contractor agent",
      "key_id": "key_a4a88b624cca0612",
      "tier": "T1",
      "domain": null
    },
    "operator": {
      "display_name": "contractor operator 21c95e",
      "kind": "individual",
      "contact_verified": false
    },
    "status": "valid",
    "classes": [
      "G"
    ],
    "registered_at": "2026-10-17T23:10:11.520Z",
    "registration_expires_at": "2027-10-17T23:10:11.520Z",
    "certificate_issued_at": "2026-10-21T11:35:53.518Z",
    "certificate_expires_at": "2026-10-28T11:35:53.518Z",
    "status_url": "https://www.rightshold.com/v1/registry/RS-RE6T-6DNK"
  },
  "signature": "6cPUuJQMcfKyR2D6QEfxxuGwJrWubCKzwXkfpHBE5+rp54A/rSw1c8fYNy4/D60W9XPUbq4i/Gg06+AuPS1mCg==",
  "alg": "Ed25519",
  "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAEYWJAvPDwdwiByA4ucuPBAV0jLWwXGgtbZqbyrLNMiM=\n-----END PUBLIC KEY-----\n",
  "how_to_verify": "Verify the Ed25519 signature over the canonical JSON (sorted keys) of certificate with the issuer key at /.well-known/rightshold-issuer.json, check certificate_expires_at, and for live status GET status_url."
}