Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
File:                     946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer (raw, json)
Hash identifier:          H70DtrIBdiPkd4WG6uBuKDf2yaG5VZH9zvpxBWmOjjk=
Subject key identifier:   94:6D:AE:84:64:E7:C5:81:E9:BA:57:87:F7:4C:BD:A9:DC:F6:F8:CD
Authority key identifier: FC:8A:9C:B3:ED:18:4E:17:D3:0E:EA:1E:0F:A7:61:5C:E4:B1:AF:47
Certificate issuer:       /CN=FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47
Certificate serial:       2AEBB00F65C4D71C6AD1E73A472F598DF02569D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 14:41:49 +0000
Certificate not after:    Tue 03 Mar 2026 14:46:49 +0000
Subordinate resources:    AS: 0 -- 4294967295
                          IP: 0.0.0.0/0
                          IP: ::/0

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:eb:b0:0f:65:c4:d7:1c:6a:d1:e7:3a:47:2f:59:8d:f0:25:69:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47
        Validity
            Not Before: Mar  5 14:41:49 2024 GMT
            Not After : Mar  3 14:46:49 2026 GMT
        Subject: CN=946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:a3:39:da:80:f5:6a:50:3a:00:ba:87:98:
                    9e:c7:ef:27:3a:f9:d3:6a:92:82:a4:a0:d5:f1:8d:
                    2f:6c:3c:de:37:fa:4e:a5:4b:86:5d:f9:42:2b:83:
                    e5:cc:76:b6:ed:45:d4:9a:64:f8:33:38:c8:03:d8:
                    e4:a5:29:29:35:bb:09:61:df:92:6c:b2:2e:bf:d0:
                    01:b8:c7:d6:c6:e0:c6:4f:16:c6:2c:66:3b:ba:b9:
                    c7:bf:f3:6d:90:38:33:7f:78:42:26:94:68:94:16:
                    ea:71:37:1a:0c:e5:e6:4f:26:69:14:12:c9:e8:a0:
                    af:c5:7b:f1:54:3d:fc:91:20:a1:d2:86:1a:74:ab:
                    5b:44:90:48:e0:ee:cb:75:8d:4d:39:c5:a7:5a:71:
                    b0:c2:93:69:bd:c9:d6:ee:74:bc:66:61:14:28:94:
                    3d:9e:88:58:e5:91:db:e2:14:c1:d0:4a:e7:dc:30:
                    64:35:72:93:b5:20:a1:fe:72:38:ae:88:a3:00:4c:
                    58:2d:6d:5c:e5:b0:83:b4:05:4e:73:94:ef:93:b2:
                    cb:c7:55:bf:31:fa:51:8b:e1:0d:53:03:a6:4a:d0:
                    a3:4b:7d:0d:43:b7:1a:de:75:67:ca:a7:fa:dc:95:
                    5a:7b:80:ae:11:b5:ef:e8:37:ed:1d:00:44:2e:98:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:6D:AE:84:64:E7:C5:81:E9:BA:57:87:F7:4C:BD:A9:DC:F6:F8:CD
            X509v3 Authority Key Identifier:
                keyid:FC:8A:9C:B3:ED:18:4E:17:D3:0E:EA:1E:0F:A7:61:5C:E4:B1:AF:47

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  0.0.0.0/0
                IPv6:
                  ::/0

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  0-4294967295

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:02:3a:9f:65:88:8d:b6:ea:17:b8:f5:d8:71:c1:7a:02:
         f8:7b:e2:82:ce:39:bd:b6:b9:c9:81:ef:c2:bd:35:78:e8:24:
         50:25:cf:90:7c:09:dd:fb:1e:0b:0b:4e:45:87:c8:a9:db:9a:
         6a:a0:1c:e3:32:8f:31:52:53:3c:60:69:53:a4:ee:a0:3d:81:
         9d:3d:e9:b1:ac:93:b7:d5:b0:0e:ca:fd:f6:ba:8f:33:20:ff:
         5e:b4:ea:f0:ec:5f:cd:a5:43:a9:ee:5a:88:a4:32:78:f6:f7:
         ae:13:3a:83:68:b9:ad:8a:4d:d4:5c:86:3a:7b:bd:4e:ef:c9:
         0a:6e:2f:71:3a:97:99:4f:4f:a5:a6:37:6e:2f:66:58:42:dc:
         61:df:b1:81:53:5f:03:5c:74:e6:ac:f4:13:2c:e9:96:b5:3a:
         89:b7:95:9d:14:a2:00:f7:7a:32:d5:7f:a4:d6:5e:de:17:d8:
         c7:3e:e7:1c:35:a6:89:cf:e5:b3:83:5e:82:8c:f5:2b:0b:35:
         c0:c8:b5:df:57:f2:5e:65:7d:de:85:90:d7:ba:a1:d7:aa:32:
         02:d4:56:79:4f:23:5b:f0:c4:0a:41:69:6e:40:29:97:a6:f8:
         8b:4f:5a:92:d1:05:4b:96:13:7b:72:96:fc:e9:e5:03:a4:f5:
         dd:2e:8b:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 15 13:59:32 2024 by rpki-client on console-fra.rpki-client.org