Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69eeafa9476d8f5e6531f229b93204d42e582a26.cer
File:                     69eeafa9476d8f5e6531f229b93204d42e582a26.cer (raw, json)
Hash identifier:          DRPwTd4bTzQQJmldE11mxELszbuIy6pOSGj4gmh9jSk=
Subject key identifier:   2B:5F:99:AE:B8:FE:5A:1D:0B:5E:AE:33:E6:BD:9B:B4:1C:FA:39:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01089AB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/305b257e-0e38-4d43-8074-9ba7ee17c01d/69eeafa9476d8f5e6531f229b93204d42e582a26.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/305b257e-0e38-4d43-8074-9ba7ee17c01d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Apr 2021 14:43:05 +0000
Certificate not after:    Fri 28 Feb 2025 19:25:44 +0000
Subordinate resources:    IP: 2801:13e::/40

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17341108 (0x1089ab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 30 14:43:05 2021 GMT
            Not After : Feb 28 19:25:44 2025 GMT
        Subject: CN=69eeafa9476d8f5e6531f229b93204d42e582a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e0:7c:73:de:64:30:84:53:f6:c8:9b:f3:8a:
                    96:5c:ef:fe:f9:55:fa:66:0f:43:2c:dc:54:d9:e1:
                    96:c4:be:52:77:bf:8c:80:90:6b:47:7e:d3:1e:41:
                    a4:ef:af:ec:94:e8:db:cd:ff:93:ab:d1:29:b5:31:
                    23:4c:c7:89:0d:fe:45:82:9e:dd:e8:9c:e2:d7:f4:
                    98:b7:b5:48:aa:f5:53:ac:79:6b:01:b4:e2:ac:da:
                    4a:4d:2e:30:df:c9:6f:21:9f:cf:26:34:2c:3a:ce:
                    42:95:09:75:79:16:59:2b:43:16:14:dd:f0:b3:8b:
                    b7:a5:c8:56:5b:8a:f6:53:12:19:c5:30:84:6e:58:
                    f4:19:5d:5a:aa:7c:67:38:e9:c7:2b:c4:13:13:65:
                    cd:55:d5:99:05:48:7b:41:0c:1a:7c:8f:cf:e8:5f:
                    6a:52:f7:64:15:87:f6:9b:f0:9c:72:86:b4:23:4a:
                    c9:62:61:4e:f4:63:0b:00:83:2b:75:a1:39:a5:7d:
                    b0:18:16:68:d2:38:0a:5b:7c:8a:dd:aa:20:9a:80:
                    bb:d7:00:4e:7d:6b:6b:ab:3a:02:95:c8:8b:86:38:
                    22:68:b4:70:50:a0:77:af:84:92:25:59:f4:9c:8b:
                    f3:e7:c1:36:5a:f6:3f:b1:33:f6:74:d1:be:1a:9f:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5F:99:AE:B8:FE:5A:1D:0B:5E:AE:33:E6:BD:9B:B4:1C:FA:39:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/305b257e-0e38-4d43-8074-9ba7ee17c01d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/305b257e-0e38-4d43-8074-9ba7ee17c01d/69eeafa9476d8f5e6531f229b93204d42e582a26.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13e::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:6a:5b:d4:40:9c:c9:f9:25:2e:c5:cf:93:5b:6a:4e:0c:0d:
         21:8f:63:32:49:3a:a8:a8:ca:b0:c7:39:5c:02:47:5f:5d:5b:
         d7:c0:21:2e:92:2c:72:87:45:5f:2a:a9:77:bc:e6:b7:10:63:
         0d:aa:83:8e:b9:b6:e0:ec:78:0c:b9:98:36:0a:97:56:2b:c8:
         88:ee:fb:98:ca:ba:2a:43:48:83:5c:22:2a:60:87:1f:d0:34:
         a5:0a:d4:9c:1e:f4:ee:25:4d:6e:8c:0d:93:e6:0f:11:33:54:
         ff:3b:9a:94:c1:a1:ef:00:cf:be:00:85:7b:43:87:3e:03:9a:
         70:d3:e0:ef:81:fb:8e:36:98:ff:e0:c4:f0:76:44:53:32:04:
         29:90:3c:0b:25:c9:8a:35:92:ba:e4:a7:fa:53:00:9e:37:55:
         54:32:d4:b2:08:6c:fc:18:33:0c:a6:48:83:92:1c:87:2f:87:
         39:61:3f:e5:66:df:7d:22:df:08:34:29:0f:41:d1:60:60:c6:
         15:e7:8c:3d:70:87:a0:93:69:69:8f:cb:1f:69:31:e8:0d:10:
         9c:6a:79:b0:f5:9e:a4:41:37:f5:a2:bc:86:88:b1:eb:79:82:
         69:e0:2f:90:a9:3b:94:26:37:eb:d6:d7:0e:69:0a:69:82:10:
         a5:26:ff:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:11:30 2024 by rpki-client on console-ams.rpki-client.org