Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5de7951af17313ff75f3239cc744c63f2ab25b0b.cer
File:                     5de7951af17313ff75f3239cc744c63f2ab25b0b.cer (raw, json)
Hash identifier:          mnzz7757gsq1r0iduviY9O9zZRAyAUpRfE4fGtYmIYw=
Subject key identifier:   56:D3:D4:34:73:6F:00:94:5B:C2:3E:F0:F2:0A:57:85:EB:27:1E:50
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01077370
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/5de7951af17313ff75f3239cc744c63f2ab25b0b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:02 +0000
Certificate not after:    Tue 18 Feb 2025 22:53:58 +0000
Subordinate resources:    IP: 168.232.28.0/22
                          IP: 2803:6340::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17265520 (0x1077370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:02 2017 GMT
            Not After : Feb 18 22:53:58 2025 GMT
        Subject: CN=5de7951af17313ff75f3239cc744c63f2ab25b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:d4:7f:84:bb:21:5a:6d:4a:e2:5c:61:61:
                    c3:22:13:7a:a9:bc:39:5b:97:65:c4:dc:34:5e:e1:
                    16:99:55:4b:7b:69:47:38:4e:a6:00:59:af:f1:e7:
                    aa:bf:38:16:66:b1:8e:36:03:c0:45:f5:eb:a9:00:
                    36:ff:9e:b4:fd:89:ef:4b:8c:f6:3e:0f:69:1d:02:
                    28:e3:8e:e1:48:24:46:54:13:a5:31:2d:56:cf:48:
                    46:b4:d6:a5:5b:3f:e3:fe:d4:a1:89:4b:d1:79:a2:
                    70:c1:77:5b:dd:cd:da:9f:4d:69:f2:15:78:ce:7e:
                    71:b2:de:66:74:24:bd:f8:5e:13:93:4f:3d:38:15:
                    f1:42:df:f3:d7:b7:0b:84:49:22:9c:ba:94:29:42:
                    c2:17:97:7d:83:84:dd:e1:a5:9e:e0:a2:01:fc:3e:
                    27:ee:d5:a9:69:7f:7d:6c:ca:f2:ff:23:b0:d0:5d:
                    e7:e5:93:50:9b:aa:60:50:17:24:3f:27:3e:67:18:
                    b1:db:0b:37:fc:db:db:a5:0f:de:cf:77:52:20:19:
                    51:2e:f7:9c:d5:5d:10:25:a0:3e:d5:f3:63:99:19:
                    e9:6b:24:6a:0f:ec:04:47:ea:d5:b8:8a:2c:e0:80:
                    64:84:2a:ee:91:f9:b4:b5:54:31:ff:cc:9d:30:71:
                    cd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D3:D4:34:73:6F:00:94:5B:C2:3E:F0:F2:0A:57:85:EB:27:1E:50
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/5de7951af17313ff75f3239cc744c63f2ab25b0b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.28.0/22
                IPv6:
                  2803:6340::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:86:f2:02:a0:60:b4:5b:c7:f5:06:f0:2b:e6:c0:d0:b7:cb:
         b4:61:0d:c6:af:e9:3d:50:81:e6:7b:bd:1b:8d:41:ae:cb:4d:
         2f:da:f0:35:f3:7c:b2:68:8c:20:70:1f:ec:e6:ca:da:e0:58:
         cf:d0:48:90:5b:fc:b6:de:dc:93:68:50:c4:94:ce:e0:3e:ee:
         35:9b:1e:5d:5b:c8:3e:aa:ec:17:7c:02:fb:c6:2c:0f:5a:55:
         b3:cc:cf:d1:3c:71:e7:0c:ab:0e:e6:9b:1f:39:46:7c:c3:36:
         54:2f:18:b2:30:fc:ba:bf:5c:1a:36:f8:c3:cf:e9:d5:30:a4:
         04:bf:68:72:63:f0:e8:56:4a:4a:27:ba:86:65:08:51:46:47:
         7b:ed:ea:63:6e:a0:d4:36:16:de:82:a2:c5:95:23:26:74:fb:
         2d:3d:59:42:35:04:0f:36:fa:a5:5f:3b:74:4e:1f:3c:87:86:
         8d:31:c7:3e:0f:05:b4:0e:4a:51:6d:eb:32:a3:96:80:2c:e3:
         87:86:d8:2c:ed:b4:47:8c:f0:da:1e:1b:52:44:31:f4:dc:6a:
         30:f2:88:ef:db:cc:46:65:7a:c6:47:96:d0:a7:f4:5d:b7:fc:
         92:a6:a3:69:85:50:23:42:c9:51:11:76:5e:c0:22:22:9c:32:
         90:88:9a:21
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAQdzcDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcwMloXDTI1MDIxODIyNTM1
OFowMzExMC8GA1UEAxMoNWRlNzk1MWFmMTczMTNmZjc1ZjMyMzljYzc0NGM2M2Yy
YWIyNWIwYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIww1H+EuyFa
bUriXGFhwyITeqm8OVuXZcTcNF7hFplVS3tpRzhOpgBZr/Hnqr84FmaxjjYDwEX1
66kANv+etP2J70uM9j4PaR0CKOOO4UgkRlQTpTEtVs9IRrTWpVs/4/7UoYlL0Xmi
cMF3W93N2p9NafIVeM5+cbLeZnQkvfheE5NPPTgV8ULf89e3C4RJIpy6lClCwheX
fYOE3eGlnuCiAfw+J+7VqWl/fWzK8v8jsNBd5+WTUJuqYFAXJD8nPmcYsdsLN/zb
26UP3s93UiAZUS73nNVdECWgPtXzY5kZ6Wskag/sBEfq1biKLOCAZIQq7pH5tLVU
Mf/MnTBxze0CAwEAAaOCAu0wggLpMB0GA1UdDgQWBBRW09Q0c28AlFvCPvDyCleF
6yceUDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83MzM3NjJlNy02YzI2
LTQzMjctYmRmYi1kNTA1ZTY1NDMyMTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzMzNzYyZTctNmMyNi00
MzI3LWJkZmItZDUwNWU2NTQzMjEwLzVkZTc5NTFhZjE3MzEzZmY3NWYzMjM5Y2M3
NDRjNjNmMmFiMjViMGIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjoHDANBAIAAjAHAwUAKANjQDAN
BgkqhkiG9w0BAQsFAAOCAQEARIbyAqBgtFvH9QbwK+bA0LfLtGENxq/pPVCB5nu9
G41BrstNL9rwNfN8smiMIHAf7ObK2uBYz9BIkFv8tt7ck2hQxJTO4D7uNZseXVvI
PqrsF3wC+8YsD1pVs8zP0Txx5wyrDuabHzlGfMM2VC8YsjD8ur9cGjb4w8/p1TCk
BL9ocmPw6FZKSie6hmUIUUZHe+3qY26g1DYW3oKixZUjJnT7LT1ZQjUEDzb6pV87
dE4fPIeGjTHHPg8FtA5KUW3rMqOWgCzjh4bYLO20R4zw2h4bUkQx9NxqMPKI79vM
RmV6xkeW0Kf0Xbf8kqajaYVQI0LJURF2XsAiIpwykIiaIQ==
-----END CERTIFICATE-----
Generated at Fri Mar 29 04:58:32 2024 by rpki-client on console-fra.rpki-client.org