$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer File: 2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer (raw, json) Hash identifier: UsZVEQLoBlHeV+aS1xqEl8R5BpLgdY2OQFOW67lRem8= Subject key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5384360452DBB72BF48F66EAF745A7F162F142A0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:42:05 +0000 Certificate not after: Tue 04 Mar 2025 17:47:05 +0000 Subordinate resources: AS: 264729 -- 264730 IP: 167.28.0.0/16 IP: 170.233.152.0/22 IP: 2801:1b:9000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:84:36:04:52:db:b7:2b:f4:8f:66:ea:f7:45:a7:f1:62:f1:42:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:42:05 2024 GMT Not After : Mar 4 17:47:05 2025 GMT Subject: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:8a:6c:12:6b:97:73:3c:95:d2:bf:b4:84: 0d:4c:68:c5:0e:5b:3a:e9:b6:4a:1c:29:71:33:e0: 29:1c:d3:d2:9e:48:d8:ee:43:97:fb:b8:0a:6b:63: a3:fc:41:63:f3:da:31:b6:78:86:fe:aa:3f:5e:0d: 6d:d4:fc:1b:ca:c7:04:1b:18:d3:02:b2:8c:ef:f2: 2d:70:8c:e8:b5:c4:ab:83:fd:8a:fa:0d:d6:9f:fd: 28:cb:f5:8f:65:6a:6d:37:cc:7c:cb:bb:4f:40:99: 53:08:3a:a5:c0:b7:ec:c8:45:64:e9:cc:c7:4c:db: da:b8:65:89:de:2e:0c:74:19:fd:16:2b:a9:d8:8c: b4:81:b1:55:6c:ee:e6:be:99:28:37:e2:e8:02:86: 20:6e:74:dc:cf:1f:6a:21:aa:47:36:bb:21:72:90: 08:1c:39:c5:00:57:1c:8d:de:4c:b4:5c:b1:99:51: a3:85:92:f7:82:00:57:44:9a:b2:a4:2c:58:c1:81: 9c:80:21:0f:d3:a8:62:da:ec:69:2b:ce:95:6b:01: cb:d3:ef:35:af:b9:4b:d3:55:7e:f0:fa:6b:a9:01: cc:81:35:0b:40:0f:55:7f:aa:53:7c:0f:9b:17:6e: c9:79:2e:76:b7:6a:87:31:85:e2:69:25:b0:d7:24: 47:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.28.0.0/16 170.233.152.0/22 IPv6: 2801:1b:9000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264729-264730 Signature Algorithm: sha256WithRSAEncryption 11:bb:72:e5:2c:72:42:b4:6d:26:44:e0:b0:c3:70:df:0c:66: 31:15:0b:89:c0:a7:7b:0b:c8:a4:8d:00:0d:28:5b:7a:50:e1: 10:71:cd:0c:32:0e:92:a0:ef:2c:97:49:2c:a4:57:90:22:4d: 34:51:cf:3c:c9:ef:82:10:00:19:89:34:6d:04:d8:18:cb:e3: b0:2f:4c:05:bd:4c:72:44:90:ee:bb:40:bf:bf:aa:1e:48:1f: a8:53:b5:61:94:16:40:90:7a:cc:b5:de:9f:54:3a:19:dc:39: e1:9b:4d:bf:5e:9c:92:58:30:21:a9:3c:fd:50:6f:a7:26:a3: b5:d6:d9:87:d7:8b:14:80:13:ff:8a:0e:2c:72:3f:c8:58:85: e1:b9:48:38:13:9a:92:12:f9:53:1e:03:28:9a:24:d0:7c:a1: 73:c8:e0:54:13:e9:4a:5c:9c:a3:d2:ef:c7:1c:fd:68:f9:53: 0e:74:d7:ff:71:d4:5f:0f:fd:b6:fb:21:93:c6:86:82:f9:f0: 37:7a:bd:25:1b:a6:0d:3c:7b:1f:6a:53:b2:36:d7:de:ed:25: 15:4d:ca:54:c4:e2:b5:e6:90:83:66:f4:e9:df:d1:33:be:22: ed:26:cc:a2:6d:9f:6d:38:a4:f0:e6:51:a8:68:67:e7:ff:0a: d1:76:19:50 -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIUU4Q2BFLbtyv0j2bq90Wn8WLxQqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQyMDVaFw0yNTAzMDQxNzQ3MDVaMDMxMTAvBgNV BAMTKDJFRDQ3QzJGQjc1RDIzNjdFMDFDNzZFRjVCRDkzNjQyRkU1NkYwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaqYpsEmuXczyV0r+0hA1MaMUO WzrptkocKXEz4Ckc09KeSNjuQ5f7uAprY6P8QWPz2jG2eIb+qj9eDW3U/BvKxwQb GNMCsozv8i1wjOi1xKuD/Yr6Ddaf/SjL9Y9lam03zHzLu09AmVMIOqXAt+zIRWTp zMdM29q4ZYneLgx0Gf0WK6nYjLSBsVVs7ua+mSg34ugChiBudNzPH2ohqkc2uyFy kAgcOcUAVxyN3ky0XLGZUaOFkveCAFdEmrKkLFjBgZyAIQ/TqGLa7GkrzpVrAcvT 7zWvuUvTVX7w+mupAcyBNQtAD1V/qlN8D5sXbsl5Lna3aocxheJpJbDXJEdrAgMB AAGjggO9MIIDuTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQu1Hwvt10jZ+Ac du9b2TZC/lbwUTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEIxODE1RUFCNUZCNEU5NUIzNjFFMEIx NkUwMTI3NjdCN0Q4ODQ0RjhGNkE0ODBENTdFQzI4QUFFRDE1NDVCNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84QjE4MTVFQUI1RkI0RTk1QjM2MUUwQjE2RTAxMjc2N0I3RDg4NDRGOEY2 QTQ4MEQ1N0VDMjhBQUVEMTU0NUI3LzAvMkVENDdDMkZCNzVEMjM2N0UwMUM3NkVG NUJEOTM2NDJGRTU2RjA1MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDARBAIAATALAwMApxwDBAKq6Zgw DwQCAAIwCQMHACgBABuQADAhBggrBgEFBQcBCAEB/wQSMBCgDjAMMAoCAwQKGQID BAoaMA0GCSqGSIb3DQEBCwUAA4IBAQARu3LlLHJCtG0mROCww3DfDGYxFQuJwKd7 C8ikjQANKFt6UOEQcc0MMg6SoO8sl0kspFeQIk00Uc88ye+CEAAZiTRtBNgYy+Ow L0wFvUxyRJDuu0C/v6oeSB+oU7VhlBZAkHrMtd6fVDoZ3Dnhm02/XpySWDAhqTz9 UG+nJqO11tmH14sUgBP/ig4scj/IWIXhuUg4E5qSEvlTHgMomiTQfKFzyOBUE+lK XJyj0u/HHP1o+VMOdNf/cdRfD/22+yGTxoaC+fA3er0lG6YNPHsfalOyNtfe7SUV TcpUxOK15pCDZvTp39EzviLtJsyibZ9tOKTw5lGoaGfn/wrRdhlQ -----END CERTIFICATE-----Generated at Thu May 16 21:44:40 2024 by rpki-client on console-fra.rpki-client.org