![](/console.gif)
Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/632e9a2ff72a8398731612b91d77d2040365c4a2.cer
File: 632e9a2ff72a8398731612b91d77d2040365c4a2.cer (raw, json)
Hash identifier: icRZDAZ0g8Vt/DUjRDKVk7iPhwQv29g7NcPaOdYpPVU=
Subject key identifier: 5D:2B:36:FF:65:7C:14:4D:98:23:0E:ED:9B:0E:07:38:4F:8A:8F:6E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: E4C161
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/632e9a2ff72a8398731612b91d77d2040365c4a2.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 11 Apr 2023 00:08:22 +0000
Certificate not after: Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources: IP: 196.32.32.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14991713 (0xe4c161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Apr 11 00:08:22 2023 GMT
Not After : Nov 1 14:00:00 2024 GMT
Subject: CN=632e9a2ff72a8398731612b91d77d2040365c4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:00:31:f8:1b:5f:1c:9d:73:05:6c:70:ee:
e9:8d:69:78:22:bd:b3:e3:76:a7:7e:ef:49:01:78:
43:23:2a:ce:c8:2d:ee:ab:92:aa:f8:28:ee:96:d0:
d1:9c:ce:4f:96:e6:88:bc:18:1c:ee:56:5b:8b:ca:
d8:c2:49:09:1f:f9:04:b5:b2:36:88:3d:14:4d:70:
48:cc:4c:88:84:98:1e:86:34:07:78:85:1c:53:c2:
a5:f5:e2:e5:44:29:61:f3:64:fb:bd:04:04:dd:1b:
e2:5e:6c:41:a6:09:e4:c6:02:29:2c:5c:32:60:ea:
a2:5c:f0:9c:b9:e4:40:0b:4e:2a:8c:04:3f:e8:a3:
58:75:c6:17:6b:44:04:15:84:27:74:42:10:ff:44:
63:14:8d:38:31:81:ef:be:a5:16:49:70:d8:43:08:
c0:45:73:21:71:91:4b:98:fa:26:c0:96:f6:f9:8c:
0a:59:ba:f7:73:6a:52:6c:40:2e:64:39:5c:7a:cf:
13:99:e1:37:d9:6b:54:b0:74:9e:61:b9:86:95:3e:
2e:38:42:db:b5:0f:23:a3:5d:d6:80:72:dc:11:93:
c4:59:40:fb:b0:cf:15:02:69:92:f6:02:83:76:51:
22:53:68:08:b5:5b:b9:4a:93:f8:13:11:b9:b0:54:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2B:36:FF:65:7C:14:4D:98:23:0E:ED:9B:0E:07:38:4F:8A:8F:6E
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5e41f8e0-767b-4f81-8908-a853d15adc64/632e9a2ff72a8398731612b91d77d2040365c4a2.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
196.32.32.0/19
Signature Algorithm: sha256WithRSAEncryption
60:26:1c:3f:a3:c4:6e:1a:94:90:19:fb:31:c7:08:37:76:83:
da:c8:cd:f8:c0:0c:93:4e:6f:2c:a4:3e:99:c5:0a:3c:53:00:
a1:67:5a:02:1c:7a:08:b1:6e:2a:a0:45:ba:f1:2a:80:ca:64:
b4:f6:4f:89:ec:2d:f6:80:63:72:cf:dc:df:ad:d6:30:b0:03:
35:f5:fa:06:69:9c:e0:9c:e5:9e:23:68:da:b7:9f:52:af:d5:
58:78:2b:aa:c0:57:73:72:78:b3:a9:ea:ee:66:15:fa:68:f8:
b3:97:31:9b:9e:f3:57:38:ca:28:05:b2:da:07:41:f7:be:19:
25:64:bd:5c:78:f4:12:6f:c5:d8:9f:ea:be:00:82:30:91:a2:
bd:37:d1:89:63:cd:cd:5e:b4:56:ad:7d:4c:f7:f8:34:a6:a3:
bb:95:73:16:ae:5c:4a:95:a3:55:61:03:43:25:3f:8b:1d:bb:
82:53:6f:b1:49:79:3a:9f:cd:0f:67:d6:09:4f:02:e2:23:87:
af:c8:ce:a5:a3:de:bd:b7:d7:7c:75:ec:f1:7d:0d:e4:26:67:
d9:6e:df:e5:0f:3a:d4:3c:b7:3e:2b:7d:2e:d9:39:dd:eb:4e:
7d:9d:ff:39:9f:a8:f9:e6:50:97:91:d4:b2:14:b8:d0:6f:62:
46:12:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:24 2024 by rpki-client on console-ams.rpki-client.org