$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB.cer File: E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB.cer (raw, json) Hash identifier: Q4fUeusLLqlzOOnTgXku1bn29MnzmbuEYWJ7d3zuFpk= Subject key identifier: E5:FD:EB:C9:B3:A4:90:E0:C7:6F:16:D6:8D:7E:13:0C:A5:DF:A8:DB Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 50EDB89E81AC7583E5D995252817B485F0D4046C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C2DF674C07459D5A2C265B41759760556180EE516F846EEB822C213E63DF8C38/0/E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C2DF674C07459D5A2C265B41759760556180EE516F846EEB822C213E63DF8C38/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:58:12 +0000 Certificate not after: Tue 04 Mar 2025 18:03:12 +0000 Subordinate resources: AS: 267916 IP: 45.179.140.0/22 IP: 2803:4e60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ed:b8:9e:81:ac:75:83:e5:d9:95:25:28:17:b4:85:f0:d4:04:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:58:12 2024 GMT Not After : Mar 4 18:03:12 2025 GMT Subject: CN=E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:7c:cc:59:92:0c:a6:e2:2b:b0:85:f5:c7: 0a:67:29:89:07:0d:68:1c:4d:7f:ba:44:2e:01:b2: fd:d4:52:c1:6f:38:0d:36:9f:fb:e7:5d:ca:01:b4: db:26:59:9a:4e:74:d8:3c:af:08:0d:ec:95:35:18: 5a:75:70:d4:8e:b7:46:67:0d:8d:f9:55:42:e1:80: 16:7b:02:a5:cc:73:ad:56:f6:de:a4:31:42:69:2d: da:63:0c:57:0f:19:1b:b5:62:19:84:98:38:97:95: d6:49:5b:f2:54:c7:fe:4a:b5:81:71:a4:70:2f:e0: 13:82:13:65:0d:29:ce:b7:49:ac:3d:72:27:a0:31: 8d:89:93:e1:b0:7d:d8:5c:ad:13:92:03:4d:cf:d0: 23:4c:8f:a2:2c:a6:05:c2:a9:7e:99:1e:3d:88:cc: 18:89:d2:bb:94:e1:f5:49:42:97:3b:d1:50:73:14: d4:b2:fe:6f:b1:23:b9:40:74:38:d3:36:b0:17:56: 04:d2:1a:fd:92:e4:37:83:72:23:bc:c1:d2:bc:25: b2:ad:19:44:ac:00:23:46:b9:06:66:13:75:7e:8a: 78:d7:c8:84:59:6b:fe:49:c8:d4:9b:f4:3a:21:20: 5b:79:cc:49:fc:a5:0a:17:90:ee:d6:4b:d1:d6:41: 41:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E5:FD:EB:C9:B3:A4:90:E0:C7:6F:16:D6:8D:7E:13:0C:A5:DF:A8:DB X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C2DF674C07459D5A2C265B41759760556180EE516F846EEB822C213E63DF8C38/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C2DF674C07459D5A2C265B41759760556180EE516F846EEB822C213E63DF8C38/0/E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.179.140.0/22 IPv6: 2803:4e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267916 Signature Algorithm: sha256WithRSAEncryption 15:3d:23:20:97:a5:85:38:c9:67:b6:29:6f:71:45:0d:f7:a2: 7b:d2:1c:00:81:1e:59:4d:03:83:69:83:5e:6f:a4:ba:84:34: ed:ff:d9:74:99:95:46:10:69:38:fd:e9:7e:7d:e1:91:a3:9c: b8:49:7b:b2:69:ee:70:a0:95:94:c9:1c:5a:15:52:a3:90:97: b8:83:a1:fd:fe:b5:23:b4:9b:da:11:c6:7e:02:60:bb:ae:45: 05:35:fb:3f:f6:9d:37:c8:c9:86:a6:97:28:c4:9b:14:72:52: 26:fb:23:27:e9:67:ad:08:ec:48:8a:f7:cf:c1:ec:cb:f6:5a: 27:3f:4c:eb:41:81:d3:e7:c7:b5:6e:42:fa:33:61:28:81:8b: ad:ba:f2:d9:0f:18:13:04:eb:35:fd:a0:80:9a:39:81:91:9a: 53:84:b9:26:ab:c0:b4:68:26:c5:9d:bd:b8:1a:b7:b0:02:b4: c7:27:49:32:c4:e1:64:ce:d8:3e:11:ff:3c:40:92:32:6c:81: 72:bd:92:62:e6:dc:c3:8d:4e:46:c0:fb:ab:e6:82:bc:0e:64: f1:65:d1:34:c4:36:b8:70:93:04:27:13:77:32:1b:6b:f0:85: 5a:f3:db:66:de:b0:df:bb:49:db:cb:16:30:c2:ba:6b:cc:e9: 08:80:9c:b6 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUUO24noGsdYPl2ZUlKBe0hfDUBGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU4MTJaFw0yNTAzMDQxODAzMTJaMDMxMTAvBgNV BAMTKEU1RkRFQkM5QjNBNDkwRTBDNzZGMTZENjhEN0UxMzBDQTVERkE4REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2k3zMWZIMpuIrsIX1xwpnKYkH DWgcTX+6RC4Bsv3UUsFvOA02n/vnXcoBtNsmWZpOdNg8rwgN7JU1GFp1cNSOt0Zn DY35VULhgBZ7AqXMc61W9t6kMUJpLdpjDFcPGRu1YhmEmDiXldZJW/JUx/5KtYFx pHAv4BOCE2UNKc63Saw9ciegMY2Jk+GwfdhcrROSA03P0CNMj6IspgXCqX6ZHj2I zBiJ0ruU4fVJQpc70VBzFNSy/m+xI7lAdDjTNrAXVgTSGv2S5DeDciO8wdK8JbKt GUSsACNGuQZmE3V+injXyIRZa/5JyNSb9DohIFt5zEn8pQoXkO7WS9HWQUHvAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTl/evJs6SQ4Mdv FtaNfhMMpd+o2zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzJERjY3NEMwNzQ1OUQ1QTJDMjY1QjQx NzU5NzYwNTU2MTgwRUU1MTZGODQ2RUVCODIyQzIxM0U2M0RGOEMzOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMkRGNjc0QzA3NDU5RDVBMkMyNjVCNDE3NTk3NjA1NTYxODBFRTUxNkY4 NDZFRUI4MjJDMjEzRTYzREY4QzM4LzAvRTVGREVCQzlCM0E0OTBFMEM3NkYxNkQ2 OEQ3RTEzMENBNURGQThEQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbOMMA0EAgAC MAcDBQAoA05gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWjDANBgkqhkiG9w0B AQsFAAOCAQEAFT0jIJelhTjJZ7Ypb3FFDfeie9IcAIEeWU0Dg2mDXm+kuoQ07f/Z dJmVRhBpOP3pfn3hkaOcuEl7smnucKCVlMkcWhVSo5CXuIOh/f61I7Sb2hHGfgJg u65FBTX7P/adN8jJhqaXKMSbFHJSJvsjJ+lnrQjsSIr3z8Hsy/ZaJz9M60GB0+fH tW5C+jNhKIGLrbry2Q8YEwTrNf2ggJo5gZGaU4S5JqvAtGgmxZ29uBq3sAK0xydJ MsThZM7YPhH/PECSMmyBcr2SYubcw41ORsD7q+aCvA5k8WXRNMQ2uHCTBCcTdzIb a/CFWvPbZt6w37tJ28sWMMK6a8zpCICctg== -----END CERTIFICATE-----Generated at Thu Nov 21 19:11:06 2024 by rpki-client on console-fra.rpki-client.org