Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
File:                     08e8921a29ec1eae940cc6e9659da39a16312ca2.cer (raw, json)
Hash identifier:          r01/dRMVCqCZAxN7zSExogJ00tXtYbvLxD13OZxWNf0=
Subject key identifier:   4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB7D55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:45 +0000
Certificate not after:    Thu 27 Jun 2024 18:30:50 +0000
Subordinate resources:    IP: 179.60.144.0/21
                          IP: 2803:b080::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15433045 (0xeb7d55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:45 2017 GMT
            Not After : Jun 27 18:30:50 2024 GMT
        Subject: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:e9:65:4a:38:32:cd:86:b9:2a:90:48:ca:
                    5a:4a:dd:6b:d3:04:fd:61:ad:e7:7e:2b:a5:48:73:
                    5d:15:a9:7d:12:17:dc:54:c3:82:3c:fb:22:0e:53:
                    da:ba:67:1d:c5:f2:7e:e8:91:17:cd:3f:97:3d:a1:
                    79:52:1c:55:32:fb:a1:65:33:62:ba:78:65:70:84:
                    64:57:2c:9f:28:d1:b1:0b:5e:4f:2a:43:03:e6:bb:
                    9b:eb:d1:08:b8:a7:13:44:0f:df:dd:3e:b7:32:33:
                    4c:82:4a:8b:73:56:17:37:e2:95:31:69:5b:4b:24:
                    33:24:6b:9f:4a:75:17:17:95:b7:d6:95:83:4c:34:
                    bd:70:47:25:08:47:72:3b:a1:98:24:c5:88:7d:54:
                    29:7b:cb:68:31:2a:14:34:c4:e9:03:63:2b:d9:61:
                    c8:f1:04:c4:8f:65:1f:53:e3:3c:0b:d8:69:0f:b0:
                    e6:b2:45:72:99:3f:3c:d7:bc:31:8a:b0:0e:e2:7c:
                    0b:88:bd:c6:53:a4:d8:04:f4:fa:c9:84:2f:4f:5a:
                    c6:b7:bd:b7:9e:7f:f8:91:96:4a:05:d6:cb:28:3e:
                    31:a1:0c:f3:d9:d8:9f:eb:7d:ce:d9:3b:a9:15:a7:
                    d4:27:9b:f6:95:3c:a6:9d:37:35:0a:c2:be:0c:2a:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.144.0/21
                IPv6:
                  2803:b080::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:6e:b8:66:1d:2f:c5:e2:10:73:cd:ed:d7:d1:88:7b:91:b5:
         cd:7d:4a:0a:f4:cd:b9:18:5c:a8:70:f6:22:1a:e7:d1:86:53:
         1e:f7:c1:34:13:20:9a:39:f5:a6:ce:2d:58:3f:42:fa:51:db:
         4a:4f:85:67:45:75:79:e1:b4:de:f4:0d:e6:6d:da:0f:10:b0:
         0e:c7:5f:25:54:4a:a0:34:72:2b:b1:61:d3:48:19:3b:0e:80:
         29:16:b4:c5:ad:09:b4:ad:22:a1:f0:c9:8a:36:fd:33:4d:00:
         62:a6:d4:b5:bc:ea:99:b9:6e:d4:43:20:8d:5c:f1:fb:5d:3e:
         ac:67:58:56:a0:ae:21:4c:7f:50:9b:81:c0:5e:c9:8d:ef:ba:
         62:e3:9f:99:99:44:d0:e5:c9:d4:08:5e:d9:b6:7a:b3:59:ca:
         d8:6c:a5:35:96:1c:33:34:9d:33:19:71:a9:d7:41:da:53:00:
         cb:b3:21:26:8c:e9:bf:a9:fe:ba:c5:aa:64:da:7d:66:d2:05:
         95:c7:95:14:ef:b5:6f:a2:db:03:af:24:8d:51:b0:eb:97:2f:
         76:86:37:d0:99:3c:dd:8e:02:af:49:74:6a:1a:66:b0:0c:e7:
         9e:b4:1d:c7:dc:0f:63:30:52:52:1d:c8:82:c9:db:06:66:21:
         cb:42:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:39:05 2024 by rpki-client on console-fra.rpki-client.org