Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7047f702e4b88509342b465e0313aa10a406121c.cer
File:                     7047f702e4b88509342b465e0313aa10a406121c.cer (raw, json)
Hash identifier:          71e3hx96pONFM52LhG9GKP7OM8GkZSxLL+QZ15FN+kA=
Subject key identifier:   FA:A0:86:28:B6:67:0A:83:D6:15:73:60:F2:2A:C8:8B:01:A6:51:09
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104675B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/7047f702e4b88509342b465e0313aa10a406121c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 13 Oct 2020 21:11:33 +0000
Certificate not after:    Sun 19 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 28477
                          IP: 148.218.0.0/16
                          IP: 2801:c4:12::/48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17065819 (0x104675b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 13 21:11:33 2020 GMT
            Not After : Jan 19 14:00:00 2025 GMT
        Subject: CN=7047f702e4b88509342b465e0313aa10a406121c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:be:9c:41:44:ad:04:15:fd:e6:f6:ce:be:3b:
                    4c:57:14:cd:35:66:fd:f7:19:be:7f:04:8e:6b:21:
                    2b:e6:c8:b8:19:1e:c9:a4:19:58:66:c1:00:69:fc:
                    25:ca:e9:05:bd:36:26:61:68:78:0c:7e:c6:68:32:
                    db:29:7c:0e:05:f3:7c:ff:d8:f6:82:49:d8:88:35:
                    b5:30:f2:87:b0:21:27:1b:47:c0:d0:dd:ab:82:22:
                    6a:b9:15:c8:7e:78:de:aa:30:35:d5:43:44:72:1d:
                    53:da:bc:cc:ca:ae:cb:ae:c2:5a:92:77:24:94:fa:
                    ed:30:ff:f5:27:62:60:f6:69:70:82:86:b8:4a:72:
                    b2:87:0b:d5:94:45:52:95:1f:45:76:d2:b0:c1:af:
                    42:2a:93:d0:66:03:33:5f:74:17:5e:2c:b0:1d:3f:
                    58:68:4a:33:02:55:2a:21:bd:05:73:d5:95:8c:3b:
                    a3:1e:2e:2c:ca:2d:43:13:9d:c4:da:d2:36:ed:24:
                    6f:5b:c3:68:d7:86:31:81:d0:00:06:97:81:8a:18:
                    9d:c0:5d:3e:bb:e7:1f:b6:c5:33:d8:8e:dd:f7:28:
                    5d:01:28:a3:7f:e0:11:8a:8c:fb:52:5b:96:42:29:
                    26:09:23:21:5d:59:4b:48:db:93:a7:70:ff:1b:89:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A0:86:28:B6:67:0A:83:D6:15:73:60:F2:2A:C8:8B:01:A6:51:09
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/7047f702e4b88509342b465e0313aa10a406121c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.218.0.0/16
                IPv6:
                  2801:c4:12::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28477

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:70:0b:4d:39:21:15:22:59:06:9d:92:13:3e:bd:8b:17:
         00:c2:40:5b:0e:5a:3b:92:e4:e0:2e:72:a4:63:c9:80:bb:33:
         80:93:1f:60:b9:7c:77:85:d1:4a:63:5a:aa:4f:0c:34:b6:31:
         21:e0:7b:4e:9b:2b:5f:2e:f7:6e:d3:b1:2d:df:25:48:5a:4a:
         d2:fa:04:24:05:2a:30:c3:62:e1:fa:df:8b:4e:45:4e:72:30:
         25:da:1c:b0:af:b9:77:bc:8d:ee:0e:c6:80:8d:2e:83:f0:49:
         b3:95:06:4d:fc:4f:99:71:7e:61:4b:70:df:38:f1:7f:5c:c2:
         36:0b:fe:78:e6:b5:3c:c7:63:91:d6:1f:0f:c6:1b:58:74:02:
         4c:b5:8b:95:e1:db:03:a6:b7:c4:3a:39:ed:a5:5e:04:52:58:
         1e:3a:43:6f:cf:86:33:d4:26:a0:84:08:18:8e:4e:ba:ae:a5:
         2c:74:ab:c3:2d:1a:48:b8:4c:a1:03:45:5c:5f:40:70:a7:68:
         ec:7a:1c:90:cd:2f:d0:44:28:9c:82:65:a5:c7:9a:b0:ab:12:
         dd:76:52:da:f0:53:9c:82:60:9d:d6:a1:fb:3b:45:c2:be:06:
         77:03:64:80:d5:d1:1a:49:da:33:64:a6:74:f1:77:f9:cb:26:
         5b:d7:82:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:44:21 2024 by rpki-client on console-ams.rpki-client.org