$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08011E07118C784A5542A719E35A9E4F8A67CD38.cer File: 08011E07118C784A5542A719E35A9E4F8A67CD38.cer (raw, json) Hash identifier: a7bGiVJMOMTz0clKZ/7D9PkZ3SXJroHcVFfdPAOBFC4= Subject key identifier: 08:01:1E:07:11:8C:78:4A:55:42:A7:19:E3:5A:9E:4F:8A:67:CD:38 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 095875B36F0DD1C342E0CE968A28407FD7BEB294 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/08011E07118C784A5542A719E35A9E4F8A67CD38.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:41:36 +0000 Certificate not after: Tue 04 Mar 2025 17:46:36 +0000 Subordinate resources: AS: 265554 IP: 45.163.120.0/22 IP: 2806:306::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:58:75:b3:6f:0d:d1:c3:42:e0:ce:96:8a:28:40:7f:d7:be:b2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:41:36 2024 GMT Not After : Mar 4 17:46:36 2025 GMT Subject: CN=08011E07118C784A5542A719E35A9E4F8A67CD38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:85:0d:62:50:89:91:b4:4b:63:e8:e3:fe: f8:55:66:d6:85:b7:4a:17:e5:25:ba:c1:fb:6b:94: 61:bd:93:fb:91:c0:55:ab:c7:44:fa:9a:2c:6d:d6: 0a:85:c7:6e:9a:be:01:c8:de:91:07:d8:4a:6b:83: 96:70:b5:af:c7:39:03:5a:74:a9:da:70:87:01:fb: 40:08:c8:d3:e3:e2:d7:0c:cd:ed:c3:75:c3:8c:57: 41:dd:2b:26:15:49:bd:cb:ac:3a:39:ac:49:61:71: 2b:d5:7b:c9:d1:0b:93:8d:32:85:a3:40:94:66:6b: a1:be:43:41:5d:8e:30:f2:d1:86:50:8c:b1:34:3e: e8:30:66:1f:c5:3f:c5:0a:5e:38:a6:79:77:f1:9c: 46:15:b6:31:8c:2b:3f:36:25:40:8f:34:84:8a:d9: 20:81:b6:3c:39:54:05:85:c8:29:c3:e2:9d:0b:cf: 7b:eb:f6:31:42:50:5c:b4:71:b7:ac:bc:a1:27:5d: 7a:22:ce:ef:33:44:54:04:16:69:c6:ff:e6:0d:81: f2:26:e5:70:12:4b:1b:f1:f3:12:1c:5c:80:4e:26: ae:ff:a2:4d:25:5e:66:b1:f9:f7:a9:ae:02:9e:6d: 4f:79:b6:09:74:58:af:cc:02:3d:96:48:f1:2b:5e: 8e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:01:1E:07:11:8C:78:4A:55:42:A7:19:E3:5A:9E:4F:8A:67:CD:38 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/08011E07118C784A5542A719E35A9E4F8A67CD38.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.120.0/22 IPv6: 2806:306::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265554 Signature Algorithm: sha256WithRSAEncryption 93:03:ed:47:6f:59:3a:e7:b8:78:33:8e:08:96:8c:ae:46:d5: 8c:02:73:b6:e8:4b:a2:a4:31:60:ef:6e:82:bf:d7:b3:40:15: 5e:9b:31:27:1f:ef:fc:df:6b:ab:81:44:77:ea:e1:fb:ba:8d: f9:42:2f:33:fe:0a:e3:84:f0:f6:da:24:7b:8f:b5:ed:bf:07: 7f:31:4c:ba:37:98:85:5e:36:dc:34:55:db:e4:85:b8:2a:f6: 53:a9:9b:5e:00:ba:d4:18:4c:b5:32:5e:5e:0e:da:5a:76:1c: c2:71:a7:bf:d5:eb:19:dd:4a:a6:15:c4:ae:bd:62:c4:4b:6b: 95:8f:b0:73:c5:86:f4:0d:c7:31:9c:ce:12:07:c2:35:68:42: 08:d4:7e:11:26:eb:11:1b:ef:0d:d6:9d:13:27:7e:21:76:e6: 21:78:72:56:2c:1f:46:5c:3e:5b:65:2f:0e:36:4a:87:d1:c6: d4:47:8b:1f:77:f2:f3:ba:9f:08:ca:b6:e2:73:76:17:fd:b6: 54:e6:e5:fc:13:79:14:0e:7d:87:4a:e8:b6:e4:74:c2:f2:05: 98:31:74:62:d9:c0:07:be:c1:fa:7b:c1:8f:48:9b:16:43:82: 49:d8:25:51:b8:41:0d:ff:ba:f8:96:ec:88:6d:42:a1:48:66: 5d:82:8d:a5 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUCVh1s28N0cNC4M6WiihAf9e+spQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQxMzZaFw0yNTAzMDQxNzQ2MzZaMDMxMTAvBgNV BAMTKDA4MDExRTA3MTE4Qzc4NEE1NTQyQTcxOUUzNUE5RTRGOEE2N0NEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtIIUNYlCJkbRLY+jj/vhVZtaF t0oX5SW6wftrlGG9k/uRwFWrx0T6mixt1gqFx26avgHI3pEH2Eprg5Zwta/HOQNa dKnacIcB+0AIyNPj4tcMze3DdcOMV0HdKyYVSb3LrDo5rElhcSvVe8nRC5ONMoWj QJRma6G+Q0FdjjDy0YZQjLE0PugwZh/FP8UKXjimeXfxnEYVtjGMKz82JUCPNISK 2SCBtjw5VAWFyCnD4p0Lz3vr9jFCUFy0cbesvKEnXXoizu8zRFQEFmnG/+YNgfIm 5XASSxvx8xIcXIBOJq7/ok0lXmax+feprgKebU95tgl0WK/MAj2WSPErXo69AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIAR4HEYx4SlVC pxnjWp5PimfNODAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzhFMjM2OEI3MUUxNzJBMUU3MjgyOTQ1 QkMzMjJERkUyRjBFMzBBMzNDMzIyQkM2OUNDQTQ4QTVEMTk3OEQ3OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83OEUyMzY4QjcxRTE3MkExRTcyODI5NDVCQzMyMkRGRTJGMEUzMEEzM0Mz MjJCQzY5Q0NBNDhBNUQxOTc4RDc5LzAvMDgwMTFFMDcxMThDNzg0QTU1NDJBNzE5 RTM1QTlFNEY4QTY3Q0QzOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaN4MA0EAgAC MAcDBQAoBgMGMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNUjANBgkqhkiG9w0B AQsFAAOCAQEAkwPtR29ZOue4eDOOCJaMrkbVjAJztuhLoqQxYO9ugr/Xs0AVXpsx Jx/v/N9rq4FEd+rh+7qN+UIvM/4K44Tw9toke4+17b8HfzFMujeYhV423DRV2+SF uCr2U6mbXgC61BhMtTJeXg7aWnYcwnGnv9XrGd1KphXErr1ixEtrlY+wc8WG9A3H MZzOEgfCNWhCCNR+ESbrERvvDdadEyd+IXbmIXhyViwfRlw+W2UvDjZKh9HG1EeL H3fy87qfCMq24nN2F/22VObl/BN5FA59h0rotuR0wvIFmDF0YtnAB77B+nvBj0ib FkOCSdglUbhBDf+6+JbsiG1CoUhmXYKNpQ== -----END CERTIFICATE-----Generated at Fri Oct 25 13:07:20 2024 by rpki-client on console-fra.rpki-client.org