$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer File: 8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer (raw, json) Hash identifier: B9iTb8TvunGPpCo7pxUdMunYzOisTwckhJa64TEgq8M= Subject key identifier: 88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 24305367D6A03B1076B47C8C4394018A95647166 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:56:36 +0000 Certificate not after: Tue 04 Mar 2025 18:01:36 +0000 Subordinate resources: IP: 45.71.7.0/24 IP: 2801:1a:b000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:30:53:67:d6:a0:3b:10:76:b4:7c:8c:43:94:01:8a:95:64:71:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:56:36 2024 GMT Not After : Mar 4 18:01:36 2025 GMT Subject: CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:6c:fd:a2:6c:0b:82:94:49:c0:5b:c1:44: 91:95:28:2a:64:2f:17:c6:5d:8a:f1:94:85:b4:f1: f7:e3:60:d4:fa:30:e4:e8:da:65:08:43:14:93:59: 9e:51:f0:5c:4d:ab:76:bb:6e:d3:c0:5d:7c:8b:90: a9:72:27:2e:16:0f:29:d7:66:b3:ad:36:1c:2d:46: 78:4a:a7:0b:b0:b7:e0:b3:65:d7:c5:ea:b8:ca:8e: bd:af:11:e4:78:bb:ac:21:3e:8d:f5:3a:5c:b6:4e: f4:aa:8e:1c:ee:e5:2f:4e:eb:09:db:08:83:0a:c7: 91:c2:58:03:7a:d6:11:14:9d:88:d6:48:42:6c:28: b9:57:bb:99:55:65:d4:52:af:16:1d:27:00:f6:b2: bb:2a:6f:63:22:a3:66:c4:a2:2e:8a:9c:57:30:50: 5f:5b:ec:2d:63:25:6a:4d:db:8f:b0:80:00:19:37: 82:97:a9:c7:06:c6:76:92:fc:d1:8a:af:6b:58:9d: 8d:19:4c:90:31:8b:c5:45:db:85:29:aa:ea:05:86: 96:3f:5b:54:11:3b:d8:73:9b:98:f1:17:40:66:0b: 03:ea:2a:b6:cf:97:32:47:57:01:2d:3b:f2:17:8d: fd:01:1e:01:d7:bb:cf:65:14:9f:26:fd:9a:e0:09: f1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.7.0/24 IPv6: 2801:1a:b000::/48 Signature Algorithm: sha256WithRSAEncryption 57:a7:3d:8c:b3:b5:2d:fe:92:6c:8e:41:6a:24:a2:48:c7:16: 44:56:11:72:9f:c3:a0:19:e8:c2:43:68:5a:ce:ad:8b:89:3e: 31:36:54:16:b8:15:8d:04:29:51:06:7c:36:3f:10:40:03:74: 05:ee:eb:c6:ba:ae:69:b9:92:07:e4:ae:90:47:7e:08:7a:db: ed:e1:9d:a5:0b:0b:f8:a3:d6:4f:ca:ec:a6:96:cd:08:9c:d3: 60:07:40:cc:eb:9b:e5:89:2f:60:65:31:bc:30:37:0f:85:85: 96:33:de:ad:db:f3:50:f6:72:a5:d9:aa:c9:3e:c6:c7:15:43: c3:94:cc:c0:61:6e:ee:69:c3:a1:69:ae:85:6a:25:6a:ca:98: eb:b1:e3:ec:80:be:92:10:f5:31:04:6e:c9:6a:bf:83:07:03: 52:51:cd:2b:4e:b8:6e:24:4f:95:b6:3c:00:58:9a:82:3e:09: 34:8f:d1:dc:24:9b:71:7b:00:a2:dd:af:e6:56:94:25:a5:42: 82:a5:d4:6e:bc:04:88:e3:7c:33:e2:2f:b9:b3:bc:27:11:8f: eb:89:ab:cf:e6:94:fe:e4:ce:5a:56:a4:73:f0:2f:2c:43:13: aa:c7:e3:f0:45:64:57:44:1b:b1:ec:22:37:82:4a:82:cb:ab: 10:58:f8:c1 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUJDBTZ9agOxB2tHyMQ5QBipVkcWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU2MzZaFw0yNTAzMDQxODAxMzZaMDMxMTAvBgNV BAMTKDg4MjlCNzJGNDFERERDNDA2RUYwODY1MTFEQzdDMEFGMjZEOEMzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWGz9omwLgpRJwFvBRJGVKCpk LxfGXYrxlIW08ffjYNT6MOTo2mUIQxSTWZ5R8FxNq3a7btPAXXyLkKlyJy4WDynX ZrOtNhwtRnhKpwuwt+CzZdfF6rjKjr2vEeR4u6whPo31Oly2TvSqjhzu5S9O6wnb CIMKx5HCWAN61hEUnYjWSEJsKLlXu5lVZdRSrxYdJwD2srsqb2Mio2bEoi6KnFcw UF9b7C1jJWpN24+wgAAZN4KXqccGxnaS/NGKr2tYnY0ZTJAxi8VF24UpquoFhpY/ W1QRO9hzm5jxF0BmCwPqKrbPlzJHVwEtO/IXjf0BHgHXu89lFJ8m/ZrgCfFdAgMB AAGjggOVMIIDkTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSIKbcvQd3cQG7w hlEdx8CvJtjD6TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEMyNjZERUE1NzY3NTgxRjE2RkNDMUNE QUU0NDRBRjVDNkM1RjU4OUFGQjg5RURGQ0NEOTQ0NkM1QTVFMTc5MS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wQzI2NkRFQTU3Njc1ODFGMTZGQ0MxQ0RBRTQ0NEFGNUM2QzVGNTg5QUZC ODlFREZDQ0Q5NDQ2QzVBNUUxNzkxLzAvODgyOUI3MkY0MUREREM0MDZFRjA4NjUx MURDN0MwQUYyNkQ4QzNFOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALUcHMA8EAgAC MAkDBwAoAQAasAAwDQYJKoZIhvcNAQELBQADggEBAFenPYyztS3+kmyOQWokokjH FkRWEXKfw6AZ6MJDaFrOrYuJPjE2VBa4FY0EKVEGfDY/EEADdAXu68a6rmm5kgfk rpBHfgh62+3hnaULC/ij1k/K7KaWzQic02AHQMzrm+WJL2BlMbwwNw+FhZYz3q3b 81D2cqXZqsk+xscVQ8OUzMBhbu5pw6FproVqJWrKmOux4+yAvpIQ9TEEbslqv4MH A1JRzStOuG4kT5W2PABYmoI+CTSP0dwkm3F7AKLdr+ZWlCWlQoKl1G68BIjjfDPi L7mzvCcRj+uJq8/mlP7kzlpWpHPwLyxDE6rH4/BFZFdEG7HsIjeCSoLLqxBY+ME= -----END CERTIFICATE-----Generated at Fri Oct 25 14:08:09 2024 by rpki-client on console-ams.rpki-client.org