![](/console.gif)
Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ddde838997f4341200fa2d13fa72b1392b8aecb.cer
File: 4ddde838997f4341200fa2d13fa72b1392b8aecb.cer (raw, json)
Hash identifier: 3GpQjqfjPhRT1G/3C0xD4pH/XrWpNu7kcs4xJ8IEamw=
Subject key identifier: D5:2F:85:E9:51:0D:79:32:BA:3D:CE:A5:83:35:D3:BD:2C:56:9F:21
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: E95BC7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/ec1f4087-45d6-46b1-aac4-6cc38c8197f1/4ddde838997f4341200fa2d13fa72b1392b8aecb.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/ec1f4087-45d6-46b1-aac4-6cc38c8197f1/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 10 May 2023 22:12:29 +0000
Certificate not after: Wed 12 Feb 2025 20:32:05 +0000
Subordinate resources: IP: 2801:1d:3800::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15293383 (0xe95bc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: May 10 22:12:29 2023 GMT
Not After : Feb 12 20:32:05 2025 GMT
Subject: CN=4ddde838997f4341200fa2d13fa72b1392b8aecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:e2:a6:15:b1:04:6d:b8:bd:b2:9f:dc:61:
09:30:9b:f3:b9:55:b4:71:d4:64:84:1e:e4:87:ca:
af:df:00:a3:11:73:75:e6:b0:a7:9f:e4:a4:57:31:
00:66:bf:c4:7d:83:01:e7:b4:19:b3:ac:57:09:65:
d4:96:0d:5d:86:4c:ed:f2:b9:32:b1:06:1f:94:5e:
07:ec:f3:21:99:96:11:5e:ca:67:12:b3:89:12:9a:
a6:e2:26:7c:1e:41:5b:f3:da:8f:e0:c4:29:08:97:
36:39:1c:df:18:b1:59:d7:00:b0:fd:79:7c:b6:59:
14:ff:d7:79:10:60:c5:05:1c:97:84:7b:aa:03:15:
3b:9f:37:e1:44:93:d5:f6:02:a7:e2:da:0e:9b:a9:
c0:47:fa:90:6c:05:3d:e9:20:1a:75:8a:94:e1:1c:
60:b7:01:f6:52:5c:b3:8e:e9:ee:7e:29:cd:08:73:
bd:2a:92:43:4f:f0:bb:85:3f:97:05:2a:8d:b3:d4:
d3:d4:76:d0:f1:13:ec:34:59:96:43:12:e8:2a:9c:
84:d6:30:18:61:57:3f:a1:08:6a:66:10:0c:8a:41:
2c:ab:d1:e2:83:0b:90:a0:4e:f8:e9:f0:31:73:a4:
09:a3:d8:03:9f:22:e4:52:c0:c2:a8:f2:40:e8:4a:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2F:85:E9:51:0D:79:32:BA:3D:CE:A5:83:35:D3:BD:2C:56:9F:21
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ec1f4087-45d6-46b1-aac4-6cc38c8197f1/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ec1f4087-45d6-46b1-aac4-6cc38c8197f1/4ddde838997f4341200fa2d13fa72b1392b8aecb.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1d:3800::/48
Signature Algorithm: sha256WithRSAEncryption
95:27:9a:b5:db:78:4b:97:e9:47:b8:96:6d:6a:d9:4c:2a:4f:
d9:33:08:d3:76:31:60:4f:6c:77:51:06:45:95:c9:ba:2b:01:
89:48:c2:75:d3:ba:79:86:a2:4d:32:e3:18:e0:9b:cc:ef:ba:
ea:52:d4:9e:12:1d:90:c4:9a:98:d9:1e:c9:b8:be:23:aa:56:
2a:d6:2f:0b:78:8f:91:ab:eb:26:85:89:59:00:bb:74:2b:c7:
b6:80:95:1c:69:aa:ce:10:87:26:00:be:38:b9:96:ea:a1:a7:
a1:9f:75:81:73:76:1e:c3:66:72:d7:bd:91:5e:40:e2:7c:4f:
43:8d:e9:eb:cb:35:23:b4:21:7b:1f:15:75:88:2a:47:46:b4:
d8:5d:2f:1c:eb:6a:c4:74:4e:cc:0e:c6:fd:96:cc:31:be:f0:
f5:66:69:e5:bb:57:5f:06:58:d3:1c:40:a1:32:e1:16:e6:ef:
de:84:6f:57:66:01:49:e2:fa:e5:d5:fc:ab:77:fe:93:a4:e9:
42:35:48:fc:62:fc:0d:62:f4:72:7f:0a:2b:5a:d8:32:0d:03:
c7:5a:60:9e:a7:4f:d7:01:bb:67:2c:5e:e9:10:8a:c9:1e:1d:
7c:6a:b5:62:bb:ca:b3:3d:93:5e:99:37:f3:c6:61:73:67:c5:
c3:c2:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:24 2024 by rpki-client on console-ams.rpki-client.org