Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228e26e6d35fd1c575922b6f33809c64b17fdcdf.cer
File:                     228e26e6d35fd1c575922b6f33809c64b17fdcdf.cer (raw, json)
Hash identifier:          dTB6z7twG4/r2udZ7DUZuSlXKG8cVD7F/q0FsM7iIGk=
Subject key identifier:   CD:09:B3:F6:D7:21:DF:00:59:16:18:1A:54:28:98:85:00:80:D9:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C5F37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/228e26e6d35fd1c575922b6f33809c64b17fdcdf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 02 Jun 2022 13:51:23 +0000
Certificate not after:    Mon 31 Mar 2025 19:57:50 +0000
Subordinate resources:    IP: 2801:1c:5800::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17588023 (0x10c5f37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  2 13:51:23 2022 GMT
            Not After : Mar 31 19:57:50 2025 GMT
        Subject: CN=228e26e6d35fd1c575922b6f33809c64b17fdcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:7f:18:12:27:5a:3e:24:6d:0a:ca:d5:d5:
                    54:0e:f7:05:c5:8c:fb:3d:01:42:12:df:35:d0:26:
                    8f:2c:eb:37:e8:e5:dc:e7:46:84:f7:7a:f0:b7:ea:
                    b1:e2:16:d9:9f:b1:cd:b0:f0:18:a6:6e:77:b4:03:
                    ca:95:44:08:07:f8:d9:f0:18:b6:f7:35:9c:d6:a6:
                    8d:b0:8f:b3:ca:5e:d5:7e:6f:58:8d:50:8b:12:c0:
                    57:1d:ab:79:a3:d9:2b:46:72:db:d0:8d:fe:30:da:
                    0d:05:d6:6e:dc:11:7b:39:59:2d:0a:07:1b:5a:83:
                    c9:04:1f:c6:0c:8a:4e:fa:f6:e0:33:af:2d:e0:3b:
                    cd:e3:48:9b:da:01:f9:e3:ff:b0:4a:34:95:7f:23:
                    9b:31:f3:ce:82:40:1a:e5:3b:71:c7:9d:55:86:12:
                    dc:41:b6:f4:fa:ed:21:63:89:ea:9a:fb:6e:4f:b7:
                    37:fd:16:f5:33:04:49:c4:6a:87:f4:80:24:51:c4:
                    6c:c9:06:6e:4e:58:d8:86:e8:64:4d:75:c1:3d:aa:
                    c2:b0:f4:83:c3:90:04:a2:50:9a:fe:17:aa:d3:0b:
                    dd:48:22:25:bb:37:79:77:46:3e:e5:95:c5:cf:7e:
                    36:2e:bf:6e:17:7e:6c:6a:a9:2d:b9:c7:e6:2b:aa:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:09:B3:F6:D7:21:DF:00:59:16:18:1A:54:28:98:85:00:80:D9:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/228e26e6d35fd1c575922b6f33809c64b17fdcdf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:b3:54:d6:80:4a:b8:fa:80:6d:35:c7:78:d9:1a:82:e3:
         34:c4:e3:85:4a:73:ed:58:4e:cd:ae:a8:b7:5f:21:54:6c:e2:
         6c:db:d5:52:78:e9:f2:cd:5b:4a:45:de:39:6f:9c:ba:97:a1:
         e4:de:29:77:9b:f7:07:0e:f7:8c:b4:4a:35:c9:c6:b7:ea:cc:
         c3:71:a6:f2:59:f3:af:26:54:2a:33:f1:35:80:ef:d0:3c:83:
         51:98:65:89:68:97:7a:d0:1b:99:6f:7e:17:e5:89:64:84:8d:
         e1:b8:c7:1d:e6:81:3d:2a:87:7d:d4:c4:ca:4b:a0:58:4c:fe:
         13:85:75:3b:76:b6:71:e9:0f:fc:b2:3d:23:81:04:b1:e9:d7:
         eb:2e:5c:fb:6b:d9:52:1c:ad:e1:0a:22:89:65:13:25:a9:f6:
         8f:38:72:f1:4d:fe:41:7c:f0:9c:43:e0:d3:ba:ee:34:e2:06:
         d9:ab:c7:37:29:e8:d9:91:64:88:12:49:fa:f4:4f:fc:43:d9:
         27:3f:7e:79:9c:f7:84:9e:10:5e:17:62:da:4e:b0:13:91:cd:
         e2:04:80:0b:55:50:91:96:b1:ab:7c:90:4a:0a:8a:0e:25:e5:
         b7:9a:6d:3e:7b:8e:00:d5:67:83:31:90:40:37:88:3b:16:38:
         ca:31:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:01:27 2024 by rpki-client on console-fra.rpki-client.org