$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer File: 044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer (raw, json) Hash identifier: XQ1vOBGugSe5wAgIeB7ZGuXuI1Jx+Sq+zU2OOfGyRQg= Subject key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 45ED2B6AB1A3F05CF7BD249C80AA054796424D50 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 23 Sep 2024 12:55:21 +0000 Certificate not after: Mon 22 Sep 2025 13:00:21 +0000 Subordinate resources: AS: 264763 AS: 273939 IP: 65.38.100.0/24 IP: 160.223.203.0/24 IP: 168.197.96.0/22 IP: 199.60.215.0/24 IP: 2803:50c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ed:2b:6a:b1:a3:f0:5c:f7:bd:24:9c:80:aa:05:47:96:42:4d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 23 12:55:21 2024 GMT Not After : Sep 22 13:00:21 2025 GMT Subject: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:2c:58:14:70:26:8d:7c:26:bd:0c:2b:1e: 64:dd:51:2d:00:63:c0:c5:a8:c2:5c:dd:a0:93:95: 67:88:e0:5f:22:69:01:63:78:3b:b4:39:bf:04:cc: 4c:06:69:21:25:e5:34:bb:e8:28:44:d1:95:16:a7: 02:de:29:8f:a4:48:43:17:c5:dc:bf:4d:eb:b5:27: c3:97:f1:0f:48:56:4e:43:9a:48:ac:a1:1d:23:d2: 14:c0:1e:aa:54:8e:a8:e0:93:aa:00:cf:08:fe:f0: 70:08:18:4f:12:f5:f7:9e:03:d8:8f:0e:50:e0:9c: 8c:6d:e3:49:3f:5c:82:83:02:33:5d:65:0f:82:fa: 50:82:5e:f1:ff:d8:40:fa:d5:03:fc:ed:f7:67:78: f7:6c:c2:20:85:ff:18:be:30:26:09:cd:dc:d9:2b: be:10:f5:c3:0f:77:dc:01:c4:6b:c5:74:83:2d:8b: 67:41:18:95:b2:1a:b5:58:bf:9f:e2:73:f8:e8:d1: f8:8a:38:5d:c4:be:a7:ca:3d:05:66:ec:26:44:aa: 13:9b:1c:01:00:90:20:e4:64:fa:62:fe:b1:c5:f4: 77:dc:1a:f3:43:85:fd:84:d5:1b:6a:d9:32:8c:d7: 5f:04:18:c1:d8:2f:73:40:79:38:c0:5c:95:7e:1b: c4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.38.100.0/24 160.223.203.0/24 168.197.96.0/22 199.60.215.0/24 IPv6: 2803:50c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264763 273939 Signature Algorithm: sha256WithRSAEncryption d4:02:f9:62:af:95:d2:f3:f6:0f:fc:b6:f1:d1:2c:52:c1:dc: e5:60:5a:99:51:9c:74:2e:52:54:d1:ef:55:5e:68:81:f6:a8: 84:23:0c:36:74:d7:75:65:66:14:a0:18:2b:b0:50:2d:e7:06: 8b:ec:63:c8:cf:dd:58:7e:84:cd:eb:44:e9:af:cd:f0:1e:03: 4a:db:98:b8:40:4f:4f:c0:a2:60:45:90:5d:f6:20:88:9a:28: 57:eb:cc:6b:3f:f6:48:29:ac:b0:cf:bf:18:1c:18:02:12:3d: d1:3c:ea:6b:1e:b2:82:da:28:1a:17:3b:67:af:32:ce:0a:b7: 3a:bb:1c:d0:94:8f:d5:39:ee:5b:9d:05:37:a8:fa:23:47:5e: 5c:e6:f9:96:a1:2f:a9:da:15:89:c3:57:69:84:de:d9:c0:b7: fc:98:5d:91:02:b4:9b:9e:8d:41:08:63:5c:34:6b:4e:c5:fd: dc:7d:2d:62:b4:a1:4a:ed:4d:3f:ce:5b:66:57:ec:d6:61:9a: ca:00:24:bd:d5:c4:ea:4c:a6:d1:bf:18:70:0d:8c:52:63:26: 79:af:61:d7:13:3f:eb:0b:99:ee:26:3d:02:d0:27:bf:8c:ef: 95:b8:80:e5:f2:ff:eb:23:24:63:c5:f7:ad:49:3a:3f:de:95: f5:37:97:b4 -----BEGIN CERTIFICATE----- MIIGvDCCBaSgAwIBAgIURe0rarGj8Fz3vSScgKoFR5ZCTVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA5MjMxMjU1MjFaFw0yNTA5MjIxMzAwMjFaMDMxMTAvBgNV BAMTKDA0NDMyOEI1ODhEN0U2QUI0RjA0OUQyNkY5RTZGREJCMkZCNTE5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXixYFHAmjXwmvQwrHmTdUS0A Y8DFqMJc3aCTlWeI4F8iaQFjeDu0Ob8EzEwGaSEl5TS76ChE0ZUWpwLeKY+kSEMX xdy/Teu1J8OX8Q9IVk5DmkisoR0j0hTAHqpUjqjgk6oAzwj+8HAIGE8S9feeA9iP DlDgnIxt40k/XIKDAjNdZQ+C+lCCXvH/2ED61QP87fdnePdswiCF/xi+MCYJzdzZ K74Q9cMPd9wBxGvFdIMti2dBGJWyGrVYv5/ic/jo0fiKOF3EvqfKPQVm7CZEqhOb HAEAkCDkZPpi/rHF9HfcGvNDhf2E1Rtq2TKM118EGMHYL3NAeTjAXJV+G8QZAgMB AAGjggPGMIIDwjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQEQyi1iNfmq08E nSb55v27L7UZcDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUYwMEMwQTMyNDQ4NEEwRTUzMjE4OUVF NjhCNDI2QUEyMjAzMzE0MzVCQTQ1MENGRkNGMzgxNkJGMTAzMTk4OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xRjAwQzBBMzI0NDg0QTBFNTMyMTg5RUU2OEI0MjZBQTIyMDMzMTQzNUJB NDUwQ0ZGQ0YzODE2QkYxMDMxOTg5LzAvMDQ0MzI4QjU4OEQ3RTZBQjRGMDQ5RDI2 RjlFNkZEQkIyRkI1MTk3MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAQSZkAwQAoN/L AwQCqMVgAwQAxzzXMA0EAgACMAcDBQAoA1DAMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwQKOwIDBC4TMA0GCSqGSIb3DQEBCwUAA4IBAQDUAvlir5XS8/YP/Lbx0SxS wdzlYFqZUZx0LlJU0e9VXmiB9qiEIww2dNd1ZWYUoBgrsFAt5waL7GPIz91YfoTN 60Tpr83wHgNK25i4QE9PwKJgRZBd9iCImihX68xrP/ZIKaywz78YHBgCEj3RPOpr HrKC2igaFztnrzLOCrc6uxzQlI/VOe5bnQU3qPojR15c5vmWoS+p2hWJw1dphN7Z wLf8mF2RArSbno1BCGNcNGtOxf3cfS1itKFK7U0/zltmV+zWYZrKACS91cTqTKbR vxhwDYxSYyZ5r2HXEz/rC5nuJj0C0Ce/jO+VuIDl8v/rIyRjxfetSTo/3pX1N5e0 -----END CERTIFICATE-----Generated at Fri Oct 25 13:07:20 2024 by rpki-client on console-fra.rpki-client.org