Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d54d511e19b079cfd93d708d6fe9189557c2ded6.cer
File:                     d54d511e19b079cfd93d708d6fe9189557c2ded6.cer (raw, json)
Hash identifier:          3oW272Qn3fExV5Yk7KqFA/8djgML1Sf9QYeKC8YJqII=
Subject key identifier:   31:CF:B1:40:6D:E6:CD:7F:CA:9E:DA:1B:CF:F5:A4:44:A2:88:FA:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB54CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ad209d1-20a4-467d-afe3-15ac5848b361/d54d511e19b079cfd93d708d6fe9189557c2ded6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ad209d1-20a4-467d-afe3-15ac5848b361/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Nov 2018 19:29:17 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    IP: 200.6.8.0/24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16471245 (0xfb54cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  6 19:29:17 2018 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=d54d511e19b079cfd93d708d6fe9189557c2ded6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:ac:b1:98:4d:c0:b3:39:66:27:d8:8d:90:
                    d2:d2:62:47:3a:50:23:76:2a:9a:2a:9c:14:14:66:
                    40:9e:f5:2e:3b:36:05:48:92:4f:f0:8f:aa:a2:d4:
                    9a:40:0c:39:87:d6:55:ba:cb:e5:f9:21:98:da:6d:
                    c7:38:07:4a:32:ee:25:b9:a4:ae:cb:2b:d7:75:9d:
                    7a:52:da:0b:11:11:60:70:42:2e:be:c5:89:0c:5a:
                    18:6f:b6:b8:c4:5a:0f:1e:bb:73:2e:4a:78:bf:3e:
                    b7:2b:35:5e:dc:e9:5e:b6:f0:77:5e:c1:bb:56:3b:
                    f0:18:60:b5:1e:21:88:a2:08:d4:cf:2c:3f:16:db:
                    4c:9e:fd:c3:1c:6c:f8:08:db:d1:f3:ae:06:6c:c9:
                    bf:5d:65:28:ff:eb:d0:ab:fe:c6:c7:0c:3c:3b:79:
                    a6:bb:01:92:af:21:82:30:37:31:56:ab:9d:e1:40:
                    02:e9:3c:ab:ae:d5:18:e9:c4:c8:45:8d:a0:e1:e0:
                    01:8f:64:fb:f5:f8:73:55:07:01:5e:11:93:f1:fe:
                    0f:db:90:c6:80:7a:a6:7b:24:3b:f0:54:ff:56:05:
                    08:d5:0d:64:8d:26:93:28:11:47:7a:6f:d0:85:54:
                    67:9e:cd:e6:4d:94:bd:04:1d:81:59:e4:5a:28:7b:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:B1:40:6D:E6:CD:7F:CA:9E:DA:1B:CF:F5:A4:44:A2:88:FA:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ad209d1-20a4-467d-afe3-15ac5848b361/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ad209d1-20a4-467d-afe3-15ac5848b361/d54d511e19b079cfd93d708d6fe9189557c2ded6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:0e:de:5c:3c:28:75:70:60:9c:5d:fc:85:58:11:4c:03:0a:
         a5:63:c1:79:68:73:a9:bd:3f:66:0d:5e:54:a8:fe:e9:25:a6:
         37:7f:b2:e8:37:8a:4c:a7:08:b6:5b:a6:12:7c:6b:41:fb:90:
         45:18:4e:b8:15:4b:30:14:2b:52:06:01:cf:53:c1:b4:1e:a0:
         42:67:c8:97:be:d4:00:2f:89:60:6e:06:4a:4f:06:b0:fc:52:
         52:5d:c4:30:7e:85:52:b5:1c:08:63:78:e6:13:44:d1:93:6d:
         5f:e2:56:d5:96:a8:ef:e7:14:5c:5d:e3:a0:0d:f5:3b:f9:34:
         4e:ad:67:f8:f4:52:ac:07:3c:26:ee:65:8d:d9:da:49:9f:58:
         bc:c7:53:f5:08:15:28:63:89:f9:35:d8:44:a3:27:28:9d:15:
         7b:d8:4e:3a:77:1f:3c:a1:0d:66:7f:b3:1a:0f:30:d2:44:a3:
         5b:20:c9:75:fd:fb:81:98:ca:71:6d:21:e5:23:72:15:d7:89:
         be:b3:22:bd:fe:36:36:9d:ee:f7:a0:c7:3e:e9:cf:c4:81:1e:
         b8:bc:df:93:ea:b2:f1:70:0e:92:28:80:2d:13:e4:4b:76:06:
         67:74:74:c8:6f:73:f7:d2:b1:aa:f0:58:61:dc:8c:40:91:21:
         16:4d:96:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:28 2024 by rpki-client on console-ams.rpki-client.org