Manifest

$ rpki-client -vvf rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft
File:                     9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft (raw, json)
Hash identifier:          CBVFxnf0XxLoa9932ARoRcdzWmGlLmexYDHOq0NjsR8=
Subject key identifier:   00:A5:E4:3C:1B:20:71:96:91:4B:F3:4A:21:99:7B:08:23:25:73:85
Authority key identifier: 9D:5B:C1:DD:56:F6:8C:BE:79:27:FD:B4:B4:87:D9:1D:AE:F7:29:A0
Certificate issuer:       /CN=9d5bc1dd56f68cbe7927fdb4b487d91daef729a0
Certificate serial:       36BEF989A089EA6093691882E1D9E5D0EF295BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVvB3Vb2jL55J_20tIfZHa73KaA.cer
Subject info access:      rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft
Manifest number:          0149
Signing time:             Mon 10 Jun 2024 22:21:20 +0000
Manifest this update:     Mon 10 Jun 2024 22:16:20 +0000
Manifest next update:     Wed 12 Jun 2024 02:03:20 +0000
Files and hashes:         1: 9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.crl (hash: 3MI0SptHGSBL02UHVUrKrgdj5dyNPgx7J8J6LzASmaM=)
                          2: AS199693.asa (hash: WPaSgbi/veoRtzwhw4F2yZagX+ybcvCscBsJlrgnBic=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.crl
                          rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVvB3Vb2jL55J_20tIfZHa73KaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:be:f9:89:a0:89:ea:60:93:69:18:82:e1:d9:e5:d0:ef:29:5b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5bc1dd56f68cbe7927fdb4b487d91daef729a0
        Validity
            Not Before: Jun 10 22:16:20 2024 GMT
            Not After : Jun 12 02:03:20 2024 GMT
        Subject: CN=00A5E43C1B207196914BF34A21997B0823257385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:ae:02:ef:44:36:50:76:e8:f1:a8:e2:d7:
                    32:81:1f:21:a5:f5:68:ca:f3:8b:d0:1d:a4:cf:c0:
                    1f:0e:21:08:4d:e5:85:7a:8d:9a:66:e5:ae:86:d6:
                    9e:fa:09:18:a9:3d:36:07:6b:7f:2f:9e:38:16:e4:
                    eb:58:db:aa:82:b8:34:96:c9:de:c7:71:51:3f:65:
                    bd:6b:55:c5:95:ff:72:7b:98:4c:c6:85:70:72:1c:
                    02:f5:58:d2:4d:a2:8f:ba:d1:82:b5:0e:fd:25:0e:
                    60:1c:45:c0:66:3b:b9:68:c2:0d:a7:72:cc:7b:d5:
                    be:9b:24:6d:e3:57:03:6c:ad:73:6f:bb:40:31:cc:
                    f7:df:26:72:43:7e:3b:f9:5e:f0:ed:0e:8c:22:c1:
                    b0:91:fe:26:70:60:92:f4:82:98:8a:8f:cb:2a:8b:
                    89:dc:30:13:7e:26:86:95:6e:44:98:09:05:ca:fa:
                    d4:24:9f:ed:f6:28:93:fc:00:94:47:6b:26:f7:82:
                    3b:90:c6:5f:4a:04:75:c7:12:d9:79:ed:52:69:33:
                    2a:ca:99:8d:d8:ce:a2:0b:cc:97:a0:7b:94:f8:39:
                    3e:8c:18:5d:3c:8f:51:5f:75:ee:d0:92:df:ad:32:
                    be:64:da:f4:bb:4b:41:68:18:fc:01:55:96:58:d3:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A5:E4:3C:1B:20:71:96:91:4B:F3:4A:21:99:7B:08:23:25:73:85
            X509v3 Authority Key Identifier:
                keyid:9D:5B:C1:DD:56:F6:8C:BE:79:27:FD:B4:B4:87:D9:1D:AE:F7:29:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVvB3Vb2jL55J_20tIfZHa73KaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:aa:57:3d:76:a0:ef:fe:42:29:4d:a5:de:df:98:9a:34:fa:
         a6:b7:f0:ab:f8:d9:cb:47:4e:54:64:e0:30:fe:c5:b2:12:94:
         e8:c9:5f:3a:da:9a:17:c6:2a:d5:6d:82:50:6a:e4:59:0a:25:
         99:1e:cf:3c:02:55:79:12:e9:f3:f5:1b:cd:7d:8d:72:fd:a8:
         b4:8f:03:0a:54:90:c1:42:30:00:98:8c:91:25:92:54:58:72:
         3e:50:67:04:9a:f6:54:c0:aa:e4:46:57:db:fa:05:94:e5:fe:
         b0:28:48:be:58:e3:0c:eb:10:74:4d:c1:d7:aa:c8:9c:05:7e:
         52:b6:4d:1c:5b:e4:28:56:a9:5e:16:8b:a6:fb:9f:a3:56:a7:
         41:90:17:7c:11:b7:bc:4c:5e:97:f6:ae:6c:a8:20:43:b0:56:
         d7:bd:81:7c:6f:95:77:e3:3c:74:eb:ea:09:f9:04:08:da:e2:
         1f:e8:20:7c:b9:c4:7f:59:82:10:2c:a5:24:c1:99:9d:57:44:
         d0:aa:fb:f0:b4:76:be:88:3a:10:80:5e:40:f5:4d:0f:6a:10:
         26:07:78:e2:5b:8c:05:30:01:39:be:03:03:55:91:0e:e0:fa:
         ab:be:85:01:4c:16:4f:4d:97:5f:4f:85:f6:21:bd:fe:92:21:
         b9:2f:f2:eb
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUNr75iaCJ6mCTaRiC4dnl0O8pW+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWQ1YmMxZGQ1NmY2OGNiZTc5MjdmZGI0YjQ4N2Q5MWRh
ZWY3MjlhMDAeFw0yNDA2MTAyMjE2MjBaFw0yNDA2MTIwMjAzMjBaMDMxMTAvBgNV
BAMTKDAwQTVFNDNDMUIyMDcxOTY5MTRCRjM0QTIxOTk3QjA4MjMyNTczODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjYK4C70Q2UHbo8aji1zKBHyGl
9WjK84vQHaTPwB8OIQhN5YV6jZpm5a6G1p76CRipPTYHa38vnjgW5OtY26qCuDSW
yd7HcVE/Zb1rVcWV/3J7mEzGhXByHAL1WNJNoo+60YK1Dv0lDmAcRcBmO7lowg2n
csx71b6bJG3jVwNsrXNvu0AxzPffJnJDfjv5XvDtDowiwbCR/iZwYJL0gpiKj8sq
i4ncMBN+JoaVbkSYCQXK+tQkn+32KJP8AJRHayb3gjuQxl9KBHXHEtl57VJpMyrK
mY3YzqILzJege5T4OT6MGF08j1Ffde7Qkt+tMr5k2vS7S0FoGPwBVZZY05RDAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUAKXkPBsgcZaRS/NKIZl7CCMlc4UwHwYDVR0j
BBgwFoAUnVvB3Vb2jL55J/20tIfZHa73KaAwDgYDVR0PAQH/BAQDAgeAMFgGA1Ud
HwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jby9yZXBvL0JlZS8yLzlENUJDMURE
NTZGNjhDQkU3OTI3RkRCNEI0ODdEOTFEQUVGNzI5QTAuY3JsMGQGCCsGAQUFBwEB
BFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9uVnZCM1ZiMmpMNTVKXzIwdElmWkhhNzNLYUEuY2VyMGMGCCsG
AQUFBwELBFcwVTBTBggrBgEFBQcwC4ZHcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQmVl
LzIvOUQ1QkMxREQ1NkY2OENCRTc5MjdGREI0QjQ4N0Q5MURBRUY3MjlBMC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAL2qVz12oO/+QilNpd7fmJo0+qa38Kv42ctHTlRk4DD+xbISlOjJXzra
mhfGKtVtglBq5FkKJZkezzwCVXkS6fP1G819jXL9qLSPAwpUkMFCMACYjJElklRY
cj5QZwSa9lTAquRGV9v6BZTl/rAoSL5Y4wzrEHRNwdeqyJwFflK2TRxb5ChWqV4W
i6b7n6NWp0GQF3wRt7xMXpf2rmyoIEOwVte9gXxvlXfjPHTr6gn5BAja4h/oIHy5
xH9ZghAspSTBmZ1XRNCq+/C0dr6IOhCAXkD1TQ9qECYHeOJbjAUwATm+AwNVkQ7g
+qu+hQFMFk9Nl19PhfYhvf6SIbkv8us=
-----END CERTIFICATE-----
Generated at Mon Jun 10 22:58:34 2024 by rpki-client on console-fra.rpki-client.org