Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File:                     5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier:          XQM4eeaBtcAo+MueVd8NDuguttLhtfgvNdbmoNrIjWs=
Subject key identifier:   7F:3D:03:09:56:CD:AA:A0:86:E3:DD:16:DA:2A:9C:D6:5B:F1:77:A0
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       33BA0B93D4E74B75FA33C8894FC77666B8872A2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number:          0E47
Signing time:             Mon 30 Jun 2025 13:32:07 +0000
Manifest this update:     Mon 30 Jun 2025 13:27:07 +0000
Manifest next update:     Tue 01 Jul 2025 16:05:07 +0000
Files and hashes:         1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: rof2f2C3vazdAEYjMSwlengShvmKgImU6U0RMuvUr/s=)
                          2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 16:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ba:0b:93:d4:e7:4b:75:fa:33:c8:89:4f:c7:76:66:b8:87:2a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: Jun 30 13:27:07 2025 GMT
            Not After : Jul  1 16:05:07 2025 GMT
        Subject: CN=7F3D030956CDAAA086E3DD16DA2A9CD65BF177A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:7f:3c:81:70:0e:fa:18:1b:50:17:eb:38:
                    a5:be:8c:3b:cb:57:80:44:51:57:a7:8d:54:c0:52:
                    0f:54:5b:46:50:f8:4b:4a:00:5c:c1:61:b2:4d:fa:
                    db:24:d5:83:14:95:9e:6f:2d:f2:70:58:29:57:89:
                    ee:48:fc:85:14:43:40:5b:10:a2:88:eb:53:96:72:
                    87:8a:08:a7:a3:0a:41:00:26:ec:fd:72:3c:88:e1:
                    67:9e:1b:58:d7:fe:84:39:de:33:4d:9c:41:ce:be:
                    23:16:36:13:de:1a:65:c8:b3:40:25:7c:c7:36:a5:
                    92:bb:6b:aa:ef:11:1d:09:19:7e:b0:37:f8:27:8e:
                    d6:37:27:ee:de:79:ef:e2:19:e4:42:d2:66:32:91:
                    f0:4a:5b:36:7f:97:d6:4e:b3:ec:22:b4:87:12:80:
                    55:68:ce:80:50:48:ce:34:97:d2:bf:3b:67:3b:59:
                    81:2f:53:69:61:9e:e9:c2:06:86:93:7b:f3:45:1a:
                    16:86:2c:33:b4:3c:14:fc:54:99:18:00:00:5a:01:
                    86:ef:d7:c8:68:61:af:d1:d6:5f:22:61:fe:1e:61:
                    7c:b4:77:8b:30:78:7f:df:f0:c5:00:d6:6b:15:e2:
                    90:92:69:66:d8:95:e2:15:de:9d:d1:83:27:64:a5:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3D:03:09:56:CD:AA:A0:86:E3:DD:16:DA:2A:9C:D6:5B:F1:77:A0
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b8:d9:14:d1:46:b8:6d:0a:b6:40:d2:97:69:ce:26:14:0d:
         50:f1:db:60:da:ef:e7:73:e0:cf:3b:cf:8a:ff:47:24:38:91:
         0a:e3:fd:7d:4f:3a:ad:84:54:5d:d8:26:68:58:c6:cf:08:f9:
         b1:4b:f2:e0:53:d7:00:15:95:45:9e:cd:ee:1b:f2:a3:b1:c6:
         ac:38:60:77:f2:96:97:65:3b:04:ef:22:15:ac:49:0b:05:2f:
         21:62:cf:ff:e7:66:a4:7b:bd:d3:72:77:d9:a7:0c:0f:69:1b:
         25:ce:83:7f:2b:c8:ca:c9:6d:de:40:28:b2:75:ba:e2:b5:7b:
         a2:68:86:30:25:b7:d5:3c:3f:e3:67:96:af:9f:2b:92:95:49:
         45:a8:09:da:09:a7:43:20:e6:b6:71:e0:3d:f4:c7:65:80:f7:
         17:e5:6a:18:9a:5d:66:d0:c4:e3:66:c8:66:9f:d5:a7:fd:91:
         dd:19:47:d0:01:f3:4a:4f:6a:49:d0:6f:4f:b7:ec:bf:b6:d9:
         fc:3e:02:d0:4b:11:7f:33:11:97:f8:d0:db:3f:35:9a:51:ed:
         ec:95:0d:0e:59:8f:da:3e:37:23:94:bd:50:de:25:03:86:6e:
         34:40:fe:16:31:9d:7f:cc:85:d6:f6:66:be:e9:5f:82:95:d2:
         dc:f2:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:56:24 2025 by rpki-client