$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer File: B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer (raw, json) Hash identifier: a26ZJIjvwgmJrgcbolimyYpPy90Ju9PkuMeA294TzNE= Subject key identifier: B8:A6:24:FD:3C:BB:CD:AF:F9:A6:F2:B0:99:91:CC:D2:77:2A:B2:F7 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7743A040D9B612053773AF80416CD42902F53A2D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:41:59 +0000 Certificate not after: Tue 04 Mar 2025 17:46:59 +0000 Subordinate resources: AS: 269768 IP: 45.182.220.0/22 IP: 2803:4d60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:43:a0:40:d9:b6:12:05:37:73:af:80:41:6c:d4:29:02:f5:3a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:41:59 2024 GMT Not After : Mar 4 17:46:59 2025 GMT Subject: CN=B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0d:c5:e0:e7:2e:4a:8f:a1:5b:ca:42:30:ad: 34:e3:fc:f5:4f:57:90:1b:e8:61:05:8f:ed:da:a8: 33:ca:f7:f9:fe:2c:f1:3d:f3:da:95:57:65:04:fc: d2:e4:bb:12:49:12:38:85:88:c7:08:b4:32:32:61: b8:6f:de:ad:83:dc:bf:f4:b7:31:35:1d:34:48:d4: d2:c8:5f:9b:d4:78:78:fc:83:af:ad:ea:59:42:fa: 38:51:fe:35:b2:b2:d6:92:dd:c5:c1:b1:2e:2d:31: 9b:42:54:2c:c1:f2:20:78:a8:32:85:2c:61:a3:67: 7f:70:e5:f5:42:a2:58:37:d8:56:43:80:2e:c6:71: fa:f0:09:8f:44:3b:ce:94:ce:38:3d:9d:f2:7c:24: 4a:7e:df:31:c9:02:bd:eb:3c:07:47:0d:96:c2:98: 3a:b0:26:a2:0f:3e:67:3d:0f:d4:2e:0f:b0:bd:91: db:a7:8f:c1:f3:3a:7f:61:61:10:31:2e:42:53:4c: 3f:d6:d3:f5:86:dd:1a:f2:bc:af:de:bb:0b:b7:99: 6e:a0:17:91:33:89:6b:f9:bb:a6:f0:cc:93:0d:f9: c0:d4:fa:84:9d:6e:1b:df:46:51:78:12:68:f2:e7: d0:ef:37:5a:1f:3e:4a:3b:d0:c7:7b:0f:9a:0a:07: 8e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:A6:24:FD:3C:BB:CD:AF:F9:A6:F2:B0:99:91:CC:D2:77:2A:B2:F7 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.220.0/22 IPv6: 2803:4d60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269768 Signature Algorithm: sha256WithRSAEncryption b9:43:bb:d2:05:83:f2:ec:6d:59:34:93:ca:96:3d:42:59:38: 49:b2:09:9c:51:21:68:e2:74:fd:c4:eb:e1:4f:6e:03:3f:55: dd:71:8e:e6:0f:20:2a:c5:9d:1e:fe:22:cf:e7:d9:a2:c5:15: 29:11:8b:ed:f4:88:5a:92:25:b9:2e:97:6a:2c:91:df:e8:de: 24:28:6b:b1:42:0e:7f:26:d9:29:b0:31:7f:d7:d1:6f:6b:24: 11:50:cf:92:99:75:c2:60:c4:4b:b3:eb:0e:a4:19:c0:5a:02: 72:dd:91:41:1b:7f:a4:8c:09:85:cb:da:65:66:29:9c:9e:61: 88:7d:95:87:1f:ff:bf:76:6c:15:0d:ac:0f:9f:d7:b6:0d:73: a6:58:34:a8:2a:7f:ce:3c:c3:fa:b0:af:66:55:9f:b8:33:1d: 84:03:80:ff:39:5c:36:52:2e:6d:40:4f:a0:e7:bc:1b:7c:13: 42:99:70:1e:ed:3c:da:8f:79:4a:b5:86:8c:d1:2c:cf:66:92: 01:96:4e:ea:9c:a3:73:6b:be:55:25:5d:ce:f2:cf:3d:83:d2: ec:fa:49:b9:30:ae:7d:7a:81:4e:25:a5:38:a9:6f:c4:e0:80: 8d:ce:48:70:d8:17:0a:c9:06:1f:b1:f3:4a:7f:fd:b4:47:a2: 4a:55:bc:9c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUd0OgQNm2EgU3c6+AQWzUKQL1Oi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQxNTlaFw0yNTAzMDQxNzQ2NTlaMDMxMTAvBgNV BAMTKEI4QTYyNEZEM0NCQkNEQUZGOUE2RjJCMDk5OTFDQ0QyNzcyQUIyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZDcXg5y5Kj6FbykIwrTTj/PVP V5Ab6GEFj+3aqDPK9/n+LPE989qVV2UE/NLkuxJJEjiFiMcItDIyYbhv3q2D3L/0 tzE1HTRI1NLIX5vUeHj8g6+t6llC+jhR/jWystaS3cXBsS4tMZtCVCzB8iB4qDKF LGGjZ39w5fVColg32FZDgC7GcfrwCY9EO86Uzjg9nfJ8JEp+3zHJAr3rPAdHDZbC mDqwJqIPPmc9D9QuD7C9kdunj8HzOn9hYRAxLkJTTD/W0/WG3RryvK/euwu3mW6g F5EziWv5u6bwzJMN+cDU+oSdbhvfRlF4Emjy59DvN1ofPko70Md7D5oKB47dAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4piT9PLvNr/mm 8rCZkczSdyqy9zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDU2MzU2NjMzQTYyRjUxNTBGODlFOTVE MjA0MzhEQ0Y4QkZCMDk1NzI1NEI5RkE5M0U5RkJGMEEwRDk3REQ5Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80NTYzNTY2MzNBNjJGNTE1MEY4OUU5NUQyMDQzOERDRjhCRkIwOTU3MjU0 QjlGQTkzRTlGQkYwQTBEOTdERDk3LzAvQjhBNjI0RkQzQ0JCQ0RBRkY5QTZGMkIw OTk5MUNDRDI3NzJBQjJGNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbbcMA0EAgAC MAcDBQAoA01gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQdyDANBgkqhkiG9w0B AQsFAAOCAQEAuUO70gWD8uxtWTSTypY9Qlk4SbIJnFEhaOJ0/cTr4U9uAz9V3XGO 5g8gKsWdHv4iz+fZosUVKRGL7fSIWpIluS6XaiyR3+jeJChrsUIOfybZKbAxf9fR b2skEVDPkpl1wmDES7PrDqQZwFoCct2RQRt/pIwJhcvaZWYpnJ5hiH2Vhx//v3Zs FQ2sD5/Xtg1zplg0qCp/zjzD+rCvZlWfuDMdhAOA/zlcNlIubUBPoOe8G3wTQplw Hu082o95SrWGjNEsz2aSAZZO6pyjc2u+VSVdzvLPPYPS7PpJuTCufXqBTiWlOKlv xOCAjc5IcNgXCskGH7HzSn/9tEeiSlW8nA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:00:12 2024 by rpki-client on console-ams.rpki-client.org