Manifest

$ rpki-client -vvf rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft
File:                     9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft (raw, json)
Hash identifier:          jk+f3vvnI+QYA67F5rqYInDDPl85TBE2kyqtEeGlVtQ=
Subject key identifier:   E9:A8:34:FC:DF:EE:9F:28:1D:61:E0:B2:49:09:ED:E1:FF:15:86:D3
Authority key identifier: 9D:5B:C1:DD:56:F6:8C:BE:79:27:FD:B4:B4:87:D9:1D:AE:F7:29:A0
Certificate issuer:       /CN=9d5bc1dd56f68cbe7927fdb4b487d91daef729a0
Certificate serial:       4F68FE9D8BBA0E0A61C12E428F11813E7AFE246D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVvB3Vb2jL55J_20tIfZHa73KaA.cer
Subject info access:      rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft
Manifest number:          0129
Signing time:             Fri 17 May 2024 20:28:55 +0000
Manifest this update:     Fri 17 May 2024 20:23:55 +0000
Manifest next update:     Sat 18 May 2024 23:04:55 +0000
Files and hashes:         1: 9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.crl (hash: V9or5epR9F0c8BYSYUkXXdUhWMfGVdzafJNEDI5GzLk=)
                          2: AS199693.asa (hash: WPaSgbi/veoRtzwhw4F2yZagX+ybcvCscBsJlrgnBic=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.crl
                          rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVvB3Vb2jL55J_20tIfZHa73KaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:68:fe:9d:8b:ba:0e:0a:61:c1:2e:42:8f:11:81:3e:7a:fe:24:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5bc1dd56f68cbe7927fdb4b487d91daef729a0
        Validity
            Not Before: May 17 20:23:55 2024 GMT
            Not After : May 18 23:04:55 2024 GMT
        Subject: CN=E9A834FCDFEE9F281D61E0B24909EDE1FF1586D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:dc:d9:5a:b6:a8:bf:8c:39:94:f2:0e:ff:
                    21:ec:c4:e8:f4:30:71:2d:01:af:e5:2d:0e:70:88:
                    17:dd:f4:98:96:ac:4d:a2:5b:f3:dd:00:8d:f4:70:
                    75:81:2a:5d:bf:8e:8b:5e:02:73:c3:b3:1a:db:5f:
                    32:c3:90:e2:2a:c2:96:82:05:46:c9:8d:ad:70:1f:
                    2b:36:64:38:0a:dd:50:b0:16:7d:df:42:aa:63:86:
                    5d:2a:84:5b:f1:32:ac:c3:18:07:e8:80:e9:c8:f2:
                    c1:ab:cc:12:23:ca:72:81:c1:ce:c4:0f:3e:8f:84:
                    a8:35:d1:cf:94:3b:34:6a:7f:75:88:94:ab:8c:9f:
                    93:ff:15:10:d3:78:de:52:6f:a6:ab:a1:59:eb:7b:
                    8d:55:1e:32:ac:45:14:77:15:5c:3a:14:6b:3c:8d:
                    3a:54:08:e1:02:06:f8:16:ea:25:66:67:3e:2d:8a:
                    3a:80:46:6a:ab:46:62:af:b1:40:d8:29:c3:f8:69:
                    0d:0f:12:aa:26:71:98:1d:d8:57:2b:22:fa:61:64:
                    4c:8d:64:15:f6:b1:01:5c:2a:a3:67:06:38:f3:b2:
                    6f:83:0c:06:2e:ae:02:95:93:fa:c9:12:fa:74:fa:
                    0a:c9:b6:bc:e1:e7:83:a1:f1:35:69:35:af:84:8c:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A8:34:FC:DF:EE:9F:28:1D:61:E0:B2:49:09:ED:E1:FF:15:86:D3
            X509v3 Authority Key Identifier:
                keyid:9D:5B:C1:DD:56:F6:8C:BE:79:27:FD:B4:B4:87:D9:1D:AE:F7:29:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVvB3Vb2jL55J_20tIfZHa73KaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Bee/2/9D5BC1DD56F68CBE7927FDB4B487D91DAEF729A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5b:f8:fa:14:05:e9:e6:7a:68:88:c2:97:6f:d9:7a:ef:d3:
         3d:02:21:01:ee:c3:ea:a5:cd:5c:c5:17:d1:58:bf:b7:21:fb:
         1f:af:7f:2b:dd:f0:12:45:84:13:a2:1e:61:5d:f8:aa:df:c5:
         b5:75:e5:dd:de:aa:58:53:8e:27:e8:b8:9a:ab:38:1e:bd:cd:
         84:2a:26:e1:ee:8f:b1:f0:8b:89:6a:71:85:1b:d3:d9:72:22:
         34:2a:2a:24:11:52:c1:5e:4b:9a:b4:bc:61:ae:dc:52:86:74:
         9b:ce:10:2f:ac:8f:a5:4c:e9:8a:d4:ca:e9:d4:12:3e:4e:2d:
         d3:1f:56:27:e2:53:57:c0:88:9f:ce:73:59:64:cd:39:70:d8:
         f7:da:4e:6c:a1:1d:38:18:dd:af:0f:7e:cb:8c:43:8e:1a:2a:
         45:5a:eb:c6:7c:5c:ea:60:57:88:ee:f8:93:79:ff:e1:6d:e4:
         bb:c3:c5:89:9b:9f:4f:6a:fd:c1:55:4d:b1:9c:cd:8c:1c:5f:
         e5:03:a7:ca:11:eb:f3:63:b1:47:45:63:da:d7:50:e0:01:d8:
         17:ca:9f:24:88:8c:ed:39:6c:3c:bc:d9:c2:b2:ee:43:b0:77:
         23:c4:13:c8:87:64:f7:16:24:13:94:62:d9:c8:cc:6d:5d:06:
         0f:dd:0e:4e
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUT2j+nYu6DgphwS5CjxGBPnr+JG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWQ1YmMxZGQ1NmY2OGNiZTc5MjdmZGI0YjQ4N2Q5MWRh
ZWY3MjlhMDAeFw0yNDA1MTcyMDIzNTVaFw0yNDA1MTgyMzA0NTVaMDMxMTAvBgNV
BAMTKEU5QTgzNEZDREZFRTlGMjgxRDYxRTBCMjQ5MDlFREUxRkYxNTg2RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUmdzZWraov4w5lPIO/yHsxOj0
MHEtAa/lLQ5wiBfd9JiWrE2iW/PdAI30cHWBKl2/joteAnPDsxrbXzLDkOIqwpaC
BUbJja1wHys2ZDgK3VCwFn3fQqpjhl0qhFvxMqzDGAfogOnI8sGrzBIjynKBwc7E
Dz6PhKg10c+UOzRqf3WIlKuMn5P/FRDTeN5Sb6aroVnre41VHjKsRRR3FVw6FGs8
jTpUCOECBvgW6iVmZz4tijqARmqrRmKvsUDYKcP4aQ0PEqomcZgd2FcrIvphZEyN
ZBX2sQFcKqNnBjjzsm+DDAYurgKVk/rJEvp0+grJtrzh54Oh8TVpNa+EjJq1AgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQU6ag0/N/unygdYeCySQnt4f8VhtMwHwYDVR0j
BBgwFoAUnVvB3Vb2jL55J/20tIfZHa73KaAwDgYDVR0PAQH/BAQDAgeAMFgGA1Ud
HwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jby9yZXBvL0JlZS8yLzlENUJDMURE
NTZGNjhDQkU3OTI3RkRCNEI0ODdEOTFEQUVGNzI5QTAuY3JsMGQGCCsGAQUFBwEB
BFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9uVnZCM1ZiMmpMNTVKXzIwdElmWkhhNzNLYUEuY2VyMGMGCCsG
AQUFBwELBFcwVTBTBggrBgEFBQcwC4ZHcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQmVl
LzIvOUQ1QkMxREQ1NkY2OENCRTc5MjdGREI0QjQ4N0Q5MURBRUY3MjlBMC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBABJb+PoUBenmemiIwpdv2Xrv0z0CIQHuw+qlzVzFF9FYv7ch+x+vfyvd
8BJFhBOiHmFd+KrfxbV15d3eqlhTjifouJqrOB69zYQqJuHuj7Hwi4lqcYUb09ly
IjQqKiQRUsFeS5q0vGGu3FKGdJvOEC+sj6VM6YrUyunUEj5OLdMfVifiU1fAiJ/O
c1lkzTlw2PfaTmyhHTgY3a8PfsuMQ44aKkVa68Z8XOpgV4ju+JN5/+Ft5LvDxYmb
n09q/cFVTbGczYwcX+UDp8oR6/NjsUdFY9rXUOAB2BfKnySIjO05bDy82cKy7kOw
dyPEE8iHZPcWJBOUYtnIzG1dBg/dDk4=
-----END CERTIFICATE-----
Generated at Fri May 17 20:59:17 2024 by rpki-client on console-fra.rpki-client.org