Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/66cd2a46193c56fdc642e952a30882c33cb63e6a.cer
File: 66cd2a46193c56fdc642e952a30882c33cb63e6a.cer (raw, json)
Hash identifier: 0Sh0p0eH06rxjzu5ZsKFCrPDVcR/WvYLwywFAiL1YJc=
Subject key identifier: D2:99:72:BE:8B:4B:FA:04:CF:3D:6A:39:17:C5:D7:24:BF:84:01:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: F73F3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/e02e319c-4e43-4c6e-8f70-a16495981eda/66cd2a46193c56fdc642e952a30882c33cb63e6a.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/e02e319c-4e43-4c6e-8f70-a16495981eda/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 29 Aug 2023 16:00:54 +0000
Certificate not after: Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources: IP: 192.100.222.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16203583 (0xf73f3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Aug 29 16:00:54 2023 GMT
Not After : Nov 1 14:00:00 2024 GMT
Subject: CN=66cd2a46193c56fdc642e952a30882c33cb63e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:56:8a:0e:cc:99:68:1a:c1:2e:d6:bb:49:
f1:06:c1:c3:cc:40:cf:c3:2f:3e:11:47:41:a7:42:
b1:15:f0:62:fb:aa:90:f1:b0:b8:1d:c3:26:57:6f:
4c:b3:72:d3:be:65:3d:1a:ff:fe:37:44:e2:90:59:
23:fb:7e:35:34:49:9d:c1:f5:a3:f3:b8:ff:65:3f:
a4:a0:d8:1c:22:6c:f6:e5:25:a9:ce:5d:3c:bf:f7:
3e:41:45:c1:10:0c:76:c2:f1:64:91:1e:c1:99:85:
17:79:4b:f5:2e:8a:3d:93:12:fe:33:55:21:e2:c7:
10:f0:f1:0e:d6:3a:d3:1e:35:a5:c1:69:df:54:35:
07:31:dc:49:5a:f3:65:55:65:c9:f4:a7:b2:b4:1e:
24:e4:fd:a7:bc:35:1e:17:a8:68:bf:3d:d9:fd:b4:
46:cf:01:86:58:ff:c9:4f:48:84:33:87:79:5e:a5:
e8:ec:8d:fd:36:01:ba:98:ec:fa:e1:6a:05:f1:d4:
83:39:ba:02:30:e1:1f:08:8d:ed:5c:58:92:6d:3a:
ac:6b:20:64:08:47:4e:87:79:7b:de:60:14:50:03:
64:ba:83:a2:84:40:1a:cb:8e:21:63:da:51:c0:e6:
15:6b:90:3a:12:e9:54:b0:15:41:b5:27:4f:bd:29:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:99:72:BE:8B:4B:FA:04:CF:3D:6A:39:17:C5:D7:24:BF:84:01:EA
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e02e319c-4e43-4c6e-8f70-a16495981eda/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e02e319c-4e43-4c6e-8f70-a16495981eda/66cd2a46193c56fdc642e952a30882c33cb63e6a.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:78:13:d2:b5:8b:24:ab:59:4d:e5:c4:b8:16:a7:c9:d4:ad:
12:f0:d4:fb:94:ea:08:8b:aa:60:e2:bb:a6:cc:87:9f:a2:2a:
95:04:2e:39:b5:c2:d7:6a:99:bc:7c:3d:42:3e:3f:22:83:db:
eb:f4:39:76:03:de:e8:21:09:0e:82:38:6d:fc:c6:30:9b:07:
5f:74:d2:e1:95:a7:ba:8b:6d:cf:5c:df:41:2a:af:d5:68:c3:
5f:8d:da:b9:1d:c4:fa:47:01:c0:a2:e6:22:04:94:98:f9:ac:
51:4d:37:ca:73:be:df:4b:ad:12:28:cf:25:c7:1a:fa:d0:1f:
15:6c:74:4f:f6:28:02:09:50:c2:57:db:6c:57:3c:ad:2d:a6:
11:ee:58:fb:11:89:e6:ac:ab:80:48:59:dc:c5:bb:9b:27:19:
17:60:58:a1:1e:ac:87:04:60:4d:dc:ff:d8:69:51:a9:73:c3:
30:b7:c9:6f:a5:ac:df:a3:90:2e:5c:e0:3b:a6:79:0b:4f:16:
56:31:40:7f:57:34:87:2d:90:d1:22:33:b1:c5:b3:a3:40:c3:
99:0b:31:46:c7:be:36:e6:30:af:61:14:b4:52:61:ca:11:66:
aa:50:36:9f:2c:e6:f0:0f:bf:43:29:af:e5:71:b1:09:af:99:
ec:0f:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org