$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer File: 2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer (raw, json) Hash identifier: 9ujb+C9rTZ51pI4iLKJrX39Xyr8qEvUVVro1E7rEjEo= Subject key identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6EBA8FFECC4E504C68F3BF2CE78C20A682A30E12 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:39:39 +0000 Certificate not after: Tue 04 Mar 2025 17:44:39 +0000 Subordinate resources: AS: 262167 IP: 186.148.208.0/22 IP: 2800:990::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ba:8f:fe:cc:4e:50:4c:68:f3:bf:2c:e7:8c:20:a6:82:a3:0e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:39:39 2024 GMT Not After : Mar 4 17:44:39 2025 GMT Subject: CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ed:a9:5a:5b:ad:f6:3f:aa:8f:fc:0f:de:34: 9a:99:50:09:73:81:a0:d2:97:08:13:8c:25:7c:de: 00:f0:59:55:15:3c:71:88:0d:24:b1:02:fc:20:cb: 99:37:b2:5b:44:3a:77:fe:15:2d:69:45:91:51:60: 6c:18:f2:6f:ff:af:14:17:af:a9:54:8c:2c:68:4f: 87:ad:b7:f8:28:37:71:6c:bc:9b:97:86:f3:d9:1c: ae:47:b4:6e:f5:02:03:04:01:17:74:64:17:34:d8: 3a:e7:9f:7b:a0:41:88:93:6a:a1:fc:b0:cd:e6:76: 1d:fa:34:5a:f1:1a:8a:b7:da:0d:4f:45:22:39:16: 1a:ea:f5:7e:92:cf:d8:d8:73:f8:cd:a8:a0:14:24: 36:3a:f9:bb:39:86:99:4f:6a:69:08:12:d4:8d:75: e2:f4:8d:7f:0a:c1:a2:02:db:5d:46:df:68:b7:b7: 5b:2e:27:5b:cb:38:43:c5:79:6a:7d:d0:ac:8e:97: cc:ad:eb:f0:31:e4:84:b4:08:bb:3b:4d:9f:31:19: 00:9f:19:3d:48:6f:49:1c:eb:91:9f:a8:bf:60:96: 68:17:95:2e:ba:7c:80:c1:c7:6b:b6:83:f6:3c:00: 26:da:66:67:60:9f:ce:89:87:28:7f:63:e7:ef:c3: df:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.148.208.0/22 IPv6: 2800:990::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262167 Signature Algorithm: sha256WithRSAEncryption 3b:1a:8a:ca:33:2d:a8:94:3c:24:13:aa:02:e1:c2:18:f0:e6: e9:a4:08:6b:49:b5:c0:20:0b:84:1d:f9:7e:1f:ca:14:af:e8: 5a:87:22:2e:d3:bd:3a:9b:3c:70:5f:84:e4:67:5e:dc:37:7c: 36:79:2e:c8:28:ed:48:ea:8a:7a:a1:31:98:82:26:99:4f:40: ff:98:16:48:34:21:4b:19:10:e8:54:a3:1f:ee:b6:ff:99:ef: c9:8c:e0:51:47:51:6d:00:79:61:ee:06:93:c5:7a:c0:5b:45: 22:8d:61:c9:f6:19:a7:5b:ed:10:1b:2d:77:43:94:77:13:47: 74:fc:82:60:19:59:c4:93:f7:6a:29:82:c5:58:fe:36:39:3e: 4c:f8:7a:94:e3:ef:d9:69:e6:9d:e4:af:21:fd:2a:29:90:1a: b4:f2:23:43:70:07:23:94:05:8a:74:12:89:d0:a5:85:42:00: 7e:fc:53:3d:a4:9e:ed:4f:0b:78:17:25:a1:55:ff:ab:47:c9: c5:f0:dc:0b:5c:7d:a4:89:be:47:d0:e6:8a:b6:ab:69:ba:54: ba:a6:66:22:ba:e9:27:b6:8a:a9:68:e0:68:f7:ec:1d:eb:bd: bc:e7:b6:ea:aa:d4:cb:fa:63:bc:d0:90:e8:a6:05:cf:02:fd: 22:82:0c:12 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUbrqP/sxOUExo878s54wgpoKjDhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM5MzlaFw0yNTAzMDQxNzQ0MzlaMDMxMTAvBgNV BAMTKDJFMDJFQzZEMUVFRTdBRDc4RjVCOEY3QzZDOEI3OTlBNjZCNENCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo7alaW632P6qP/A/eNJqZUAlz gaDSlwgTjCV83gDwWVUVPHGIDSSxAvwgy5k3sltEOnf+FS1pRZFRYGwY8m//rxQX r6lUjCxoT4ett/goN3FsvJuXhvPZHK5HtG71AgMEARd0ZBc02Drnn3ugQYiTaqH8 sM3mdh36NFrxGoq32g1PRSI5Fhrq9X6Sz9jYc/jNqKAUJDY6+bs5hplPamkIEtSN deL0jX8KwaIC211G32i3t1suJ1vLOEPFeWp90KyOl8yt6/Ax5IS0CLs7TZ8xGQCf GT1Ib0kc65GfqL9glmgXlS66fIDBx2u2g/Y8ACbaZmdgn86Jhyh/Y+fvw98vAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQuAuxtHu56149b j3xsi3maZrTLIDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjNCRDk0NTgxMTA2NEU2Njg3RDhBRDBE RTUwRTlENUNERDE1RkY2MDBFQUQ4MUUyOUY2MjU0MzkzMzVDMTM2MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GM0JEOTQ1ODExMDY0RTY2ODdEOEFEMERFNTBFOUQ1Q0REMTVGRjYwMEVB RDgxRTI5RjYyNTQzOTMzNUMxMzYwLzAvMkUwMkVDNkQxRUVFN0FENzhGNUI4RjdD NkM4Qjc5OUE2NkI0Q0IyMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCupTQMA0EAgAC MAcDBQAoAAmQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQAFzANBgkqhkiG9w0B AQsFAAOCAQEAOxqKyjMtqJQ8JBOqAuHCGPDm6aQIa0m1wCALhB35fh/KFK/oWoci LtO9Ops8cF+E5Gde3Dd8NnkuyCjtSOqKeqExmIImmU9A/5gWSDQhSxkQ6FSjH+62 /5nvyYzgUUdRbQB5Ye4Gk8V6wFtFIo1hyfYZp1vtEBstd0OUdxNHdPyCYBlZxJP3 aimCxVj+Njk+TPh6lOPv2WnmneSvIf0qKZAatPIjQ3AHI5QFinQSidClhUIAfvxT PaSe7U8LeBcloVX/q0fJxfDcC1x9pIm+R9DmirarabpUuqZmIrrpJ7aKqWjgaPfs Heu9vOe26qrUy/pjvNCQ6KYFzwL9IoIMEg== -----END CERTIFICATE-----Generated at Fri Oct 25 14:08:06 2024 by rpki-client on console-ams.rpki-client.org