Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/296ae134c63fda98feba9ece79438406ecc84f03.cer
File: 296ae134c63fda98feba9ece79438406ecc84f03.cer (raw, json)
Hash identifier: rY5P/K3OxrdCh6dHEWjbL835nMw1KbI3qiXQewxqKdM=
Subject key identifier: 8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: D4D4EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 17 Nov 2017 18:37:35 +0000
Certificate not after: Fri 17 Nov 2023 04:00:00 +0000
Subordinate resources: AS: 17079
IP: 143.0.104.0/22
IP: 181.189.176.0/20
IP: 200.85.0.0/19
IP: 2803:5d00::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Jun 2023 11:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13948142 (0xd4d4ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Nov 17 18:37:35 2017 GMT
Not After : Nov 17 04:00:00 2023 GMT
Subject: CN=296ae134c63fda98feba9ece79438406ecc84f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:09:1c:64:c9:d4:71:67:5d:bf:a3:c9:4d:
0f:2d:c7:0c:d4:0f:b7:0f:a2:aa:1b:8b:62:54:6c:
92:79:f8:66:ec:41:17:c2:2c:81:41:4e:13:be:62:
51:3c:77:0c:80:10:76:15:72:d7:f0:8b:92:c3:ed:
be:5d:e2:4f:c0:45:0c:e9:30:f6:6a:34:84:e5:6b:
4d:35:ad:01:68:11:ee:7a:97:45:48:d7:73:4e:e2:
5c:94:71:cf:14:56:60:dc:eb:0e:a4:e7:87:98:96:
42:80:c2:b5:39:25:62:d9:56:32:e2:b1:3f:59:b1:
9b:9b:8a:de:0b:be:49:78:52:e9:98:ab:f5:7e:ac:
38:63:bc:02:7c:52:5e:f9:f7:61:b2:10:8e:34:15:
7f:c7:f4:e4:a9:73:86:00:36:22:98:04:47:06:d2:
55:a7:26:fd:70:c1:c4:d5:be:82:3d:d1:e1:a5:e7:
06:08:b1:c0:31:a8:50:ba:f8:32:8a:f7:8c:92:2d:
a1:b6:b4:f4:ab:6a:15:4c:62:1f:c6:45:f6:02:9f:
1f:47:6a:5b:a9:2b:20:27:fd:c4:61:b2:e1:1a:08:
57:d9:49:99:0b:6e:8a:75:e5:f6:ba:52:b8:d0:2d:
7c:84:07:43:f3:96:7c:5c:0c:22:59:e9:27:b7:0b:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:F6:AD:9A:13:14:73:58:AC:E2:D8:C7:E3:B8:F5:0E:34:30:12
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bf770d2c-8158-4eb0-a55c-b5be63ecb817/296ae134c63fda98feba9ece79438406ecc84f03.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.104.0/22
181.189.176.0/20
200.85.0.0/19
IPv6:
2803:5d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17079
Signature Algorithm: sha256WithRSAEncryption
52:c9:99:85:92:15:48:15:a9:d7:35:2a:ac:0b:20:e5:5d:b4:
2e:1a:39:96:ce:99:db:f0:37:33:f9:ce:42:5b:08:46:2a:05:
e6:27:13:81:ad:38:df:13:20:a4:eb:e6:8b:45:f9:8a:33:43:
d2:f8:e4:32:35:65:59:35:12:16:9f:1b:b9:6c:ce:6b:57:41:
9d:b1:f1:0e:14:3f:b0:36:49:f1:eb:bb:de:1b:5c:68:d7:22:
8b:10:28:fa:b6:5a:4a:83:3f:ce:1a:c0:5b:7e:55:8e:89:3d:
19:1a:1d:fe:e2:d8:b8:42:0d:ad:1c:f7:3a:fc:74:61:84:b6:
2e:16:98:cc:13:d2:cd:87:1a:4e:97:3c:46:d2:15:28:18:6e:
bb:72:8a:9a:d4:a1:f7:8a:f8:7e:14:e2:6f:4b:e7:74:f6:5c:
38:df:12:4a:bb:0f:8f:96:52:56:aa:02:04:b0:79:8b:e0:6b:
91:e1:0c:d6:69:d9:7f:6e:f9:d5:e9:fc:de:eb:63:42:05:40:
b6:c3:1e:1b:c9:b8:27:fc:fd:d0:29:32:6f:ec:0f:d4:7b:aa:
bb:b5:56:b7:86:da:38:08:4a:18:96:fd:ed:01:69:96:02:5b:
9f:c0:da:12:ab:a7:93:16:c2:93:28:f2:ca:dc:ad:6a:01:5e:
04:45:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 6 14:13:23 2023 by rpki-client on console-fra.rpki-client.org