Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
File:                     ce64e257eae04ee26d8eb339f148791b31cc0875.cer (raw, json)
Hash identifier:          r11DSWVkSKZPPE9rxC9Iyhye2uDuqh9oe/NYvHJinCw=
Subject key identifier:   67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB9287
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Feb 2019 17:03:27 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 66.231.64.0/20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16487047 (0xfb9287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 19 17:03:27 2019 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:5b:9c:6f:90:97:ec:9f:80:b6:d6:b7:83:
                    03:00:50:a3:07:7a:dc:8c:af:e0:f9:91:4b:fc:d1:
                    89:68:c4:46:c2:4c:aa:fc:00:bb:09:5f:09:f4:87:
                    d4:ef:b8:c7:59:48:8c:50:6c:c3:03:8e:55:c9:3e:
                    c1:98:2c:7c:a6:42:cc:8a:ed:d8:b5:f7:a4:12:b4:
                    4a:b6:1e:0e:01:5d:fc:b4:cc:9b:5e:96:63:72:0f:
                    fb:b7:85:5e:05:bd:92:fd:ec:84:37:50:49:65:ed:
                    ea:90:a2:23:76:fb:eb:e6:4d:de:fc:33:da:b8:78:
                    e0:da:52:0b:9f:e1:40:d7:eb:0e:2f:19:5d:4e:55:
                    2a:35:81:42:f2:ee:b3:31:fa:50:b1:3e:fb:57:c3:
                    81:a5:b0:35:bf:c9:6e:7b:01:99:d4:de:06:10:f5:
                    b0:2a:bf:7b:4a:a4:81:05:24:a1:60:8d:4d:04:c0:
                    77:51:5f:44:f8:f2:8d:55:54:7e:15:e7:29:f6:3c:
                    83:22:aa:0d:77:4c:91:3b:5c:4b:2d:ec:1f:1c:d5:
                    a8:f0:1a:b4:1a:49:90:f6:bb:c5:14:61:cd:ea:0a:
                    d7:c4:23:04:ed:38:3a:49:21:ed:51:b1:10:9c:88:
                    ca:f2:03:d5:7c:f1:e1:6d:ed:ab:e1:a2:8e:1a:7c:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:38:56:be:71:e5:a7:6e:26:37:76:e4:63:05:6c:a4:09:f8:
         9d:e1:ca:0c:55:4a:37:07:25:a9:ae:c1:be:d1:02:0c:06:99:
         77:a3:69:e3:51:00:b9:e1:03:5e:6d:52:ab:82:41:6d:6b:17:
         34:80:52:88:a1:35:93:11:7f:3a:2c:15:0a:49:91:c9:41:4d:
         79:12:2c:d2:25:84:4b:42:4c:c4:9d:aa:31:36:ad:75:bd:dd:
         a8:6e:40:d3:90:07:e1:58:89:df:75:b7:38:79:a9:87:c4:24:
         86:05:de:78:8a:b0:a7:1e:f6:45:ca:4b:a9:cb:1c:bc:9a:e5:
         25:d0:3f:8b:c6:35:c2:94:47:4d:11:30:ea:8d:01:00:79:fd:
         a5:da:29:7c:a6:5c:00:5a:f5:38:7b:ed:d4:11:54:36:72:ce:
         9d:8c:9b:e8:75:c9:dc:66:b3:69:ff:0c:d9:b7:a5:7d:a2:05:
         e6:01:ed:92:79:57:c2:81:7b:4b:4e:4c:af:dc:88:d0:be:8b:
         94:c1:05:32:0b:d9:39:3e:e2:b5:bb:c8:64:57:45:f3:43:c7:
         f8:14:c1:bb:7b:9f:26:af:ea:c8:e4:5e:13:be:41:8c:f8:d0:
         29:47:2a:6c:78:54:39:44:49:01:10:51:b0:bd:a8:a9:db:cd:
         92:5f:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:03:51 2024 by rpki-client on console-ams.rpki-client.org