Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55749e5629796ab0615462147e57520811c115c5.cer
File:                     55749e5629796ab0615462147e57520811c115c5.cer (raw, json)
Hash identifier:          Pjnn/FUxwmkqgczg8z2x0kvYA0D7ApG+Gk+nCSPDRgA=
Subject key identifier:   6B:51:EB:5C:8E:DA:BC:F6:9D:E6:E2:C8:10:8E:07:B1:47:4A:89:82
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F67F07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/55749e5629796ab0615462147e57520811c115c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2017 17:14:00 +0000
Certificate not after:    Tue 24 Sep 2024 19:30:56 +0000
Subordinate resources:    IP: 45.71.7.0/24
                          IP: 2801:1a:b000::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16154375 (0xf67f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 24 17:14:00 2017 GMT
            Not After : Sep 24 19:30:56 2024 GMT
        Subject: CN=55749e5629796ab0615462147e57520811c115c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:6e:78:e2:2d:3c:e3:7d:79:f0:55:fb:8f:
                    93:a1:56:df:37:94:cc:9e:49:bc:76:b7:fc:88:16:
                    71:3b:a2:2f:b5:8c:c3:f6:0d:29:24:ad:a6:23:77:
                    cd:d7:ee:46:83:39:83:b8:51:b8:bd:2a:10:dd:3c:
                    ea:38:00:88:df:36:b7:7c:fc:3b:77:a5:47:36:dd:
                    9d:c5:50:c8:45:b0:ac:18:f3:03:1f:b2:b5:6a:c7:
                    5f:07:26:04:6d:f1:8c:6f:a7:a0:c4:2c:4f:b4:30:
                    91:33:e5:38:eb:1a:15:62:5e:5e:2f:6d:b2:48:82:
                    a1:d0:8a:1d:c2:24:82:b4:f7:4d:f5:5f:f7:1a:c6:
                    83:9a:1c:f8:14:66:9c:62:f3:d3:94:1e:08:f3:2e:
                    74:8b:35:90:60:bf:23:e4:a9:40:8f:5c:66:98:15:
                    b8:ab:f2:27:b0:94:bf:41:e5:f9:d0:93:1c:c8:57:
                    35:8a:19:ad:a4:e2:1e:63:60:04:ce:69:2d:2a:3d:
                    2b:88:09:9f:56:d7:4d:c6:a6:84:23:b4:38:d1:6c:
                    71:02:12:51:e5:8f:03:6e:06:b0:0a:ad:4a:17:c3:
                    73:fc:ff:88:38:f3:93:2e:1c:03:fb:76:34:cf:6d:
                    1e:42:2d:9d:0e:15:27:57:5c:40:0c:d6:7a:6a:d0:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:51:EB:5C:8E:DA:BC:F6:9D:E6:E2:C8:10:8E:07:B1:47:4A:89:82
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/55749e5629796ab0615462147e57520811c115c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.7.0/24
                IPv6:
                  2801:1a:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:8c:17:85:50:32:07:52:2c:bd:a4:f9:d2:53:47:b7:24:c5:
         fc:48:a5:fc:03:8c:87:93:d3:e5:71:fd:62:4e:5d:ee:80:0c:
         86:8e:5c:25:52:12:da:74:b0:9a:4e:83:67:ed:09:29:71:68:
         c8:72:8c:db:35:8f:27:c3:26:9c:55:23:37:da:f2:f1:93:eb:
         1c:06:1a:d1:13:d8:60:79:8f:e4:a6:96:e9:74:ff:2a:b8:63:
         a7:d1:e1:b3:e0:dd:8f:17:69:fc:2a:e4:53:0a:1d:d1:64:2f:
         fa:4b:c6:1f:fb:4a:70:e6:24:e8:00:fc:44:a9:5b:ae:eb:67:
         27:75:ce:25:b4:5e:09:e0:86:c2:aa:87:7d:2f:e9:5d:60:5c:
         35:95:63:84:52:56:8b:83:b2:2b:46:46:be:ce:67:fc:73:aa:
         c2:a3:2c:42:71:f8:6f:91:8b:ba:09:8d:92:fe:f9:a1:cb:bb:
         4b:70:0c:a0:66:ee:c3:b7:0a:ef:6a:54:99:3d:d0:b1:9d:1d:
         7a:c4:6e:ce:2b:6d:1c:3f:4b:9f:e8:fa:90:47:ae:8d:5c:66:
         fb:b5:cb:d7:71:a5:19:ea:c5:ab:1a:cb:d8:c7:ee:fd:53:bb:
         30:7c:12:27:8b:40:f6:09:3f:50:1b:56:65:bd:8b:48:0f:ba:
         e0:6d:ab:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:19:07 2024 by rpki-client on console-fra.rpki-client.org