Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de90e273ae02bd185c6952c548dddac9f198b970.cer
File: de90e273ae02bd185c6952c548dddac9f198b970.cer (raw, json)
Hash identifier: e/zL92e0agK9NtvBPmue4mC1PEb4YHEqV98hoF4Fhxs=
Subject key identifier: 11:40:40:F8:09:A8:52:77:7A:66:10:45:1E:57:A9:8F:02:6A:94:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: F74313
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/5a98e5de-3bdf-4ef0-9a7a-3e4c7f594c0c/de90e273ae02bd185c6952c548dddac9f198b970.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/5a98e5de-3bdf-4ef0-9a7a-3e4c7f594c0c/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 29 Aug 2023 16:01:28 +0000
Certificate not after: Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources: IP: 192.100.235.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16204563 (0xf74313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Aug 29 16:01:28 2023 GMT
Not After : Nov 1 14:00:00 2024 GMT
Subject: CN=de90e273ae02bd185c6952c548dddac9f198b970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:2b:8a:c1:23:49:01:78:74:dc:c1:21:8a:
14:fb:08:81:ea:14:10:4c:cd:54:18:3b:36:74:2b:
c6:41:f9:a6:24:35:a5:55:fc:c9:d2:23:e0:15:5c:
93:c2:4b:80:94:c7:38:ee:83:dc:d7:7b:92:0e:9e:
88:11:f5:84:bf:91:1f:ca:05:88:21:eb:bc:ce:cf:
1d:56:98:7c:8c:f2:cc:c6:8d:f0:0b:6e:e2:b0:86:
20:fc:7a:c5:9a:b5:4e:65:e9:cc:44:71:f8:9b:9e:
ae:49:6e:b3:e6:ad:57:60:de:13:d9:01:ad:28:ce:
8f:33:3e:ec:01:5f:af:58:d6:87:cb:b5:57:b0:1a:
df:e4:23:48:a5:56:9a:bd:ba:a8:8b:f2:61:12:dc:
70:80:cd:ae:26:f9:aa:9c:11:92:9e:92:38:91:69:
aa:65:14:ce:0d:fc:88:c9:d4:69:2e:80:85:4d:ad:
db:2e:3c:3f:98:bb:0c:c8:0c:b0:08:92:90:83:bb:
cb:97:85:3b:06:e1:ff:fc:d3:fc:ed:db:67:09:b6:
51:21:ea:00:64:ab:44:56:db:00:44:d4:24:55:51:
ae:d0:59:10:b3:0d:bd:34:dd:27:50:cb:2d:24:a8:
1a:0d:24:a1:02:86:24:b8:07:fe:c5:48:61:13:3d:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:40:40:F8:09:A8:52:77:7A:66:10:45:1E:57:A9:8F:02:6A:94:D0
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5a98e5de-3bdf-4ef0-9a7a-3e4c7f594c0c/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5a98e5de-3bdf-4ef0-9a7a-3e4c7f594c0c/de90e273ae02bd185c6952c548dddac9f198b970.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.235.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a6:54:bf:78:94:a7:52:8e:f4:ca:04:95:a3:41:6e:b7:f8:
b4:73:c7:b6:51:cf:83:d7:1a:ba:2e:ea:66:b8:11:b4:1a:fb:
ae:1d:f1:e6:b5:23:e4:ef:e0:27:2a:f9:a6:4c:33:f2:31:db:
ad:49:68:6a:ca:b9:a4:95:a4:3a:e9:6f:e4:4a:51:b9:3d:4a:
eb:54:ad:f4:ad:e8:2f:36:c6:5c:12:ff:9a:53:84:a2:72:68:
8d:a8:8a:85:ca:c6:80:b4:2e:57:24:3a:3c:29:a5:94:6b:a9:
a1:23:38:d6:39:b3:9f:0b:fe:a2:fb:7f:b7:57:99:54:96:07:
7c:93:54:e0:47:10:5b:5b:e6:c5:96:3c:1f:fe:16:71:eb:82:
be:31:5f:81:99:d6:3f:eb:33:96:e9:5f:b6:e5:a3:15:ab:c8:
45:a5:15:d8:ab:00:93:a4:58:70:da:ec:20:b9:75:c6:1b:34:
80:bd:eb:88:2c:55:4a:97:95:b8:2e:f3:df:8f:68:f8:68:ae:
5b:e0:b0:ab:e6:3a:87:ea:75:6d:22:ff:62:71:f9:92:67:f9:
c7:1e:df:3f:65:ea:aa:0c:bd:8c:3a:b7:47:19:48:6f:3d:33:
3d:c3:2a:b8:eb:a8:2c:94:20:d4:9e:61:34:4a:9e:f1:b0:7d:
86:1b:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org