Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File:                     5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier:          0zjjo1s2UeK1Yb/XKWVcfX9F3p9hbeug09zDz9Z0ygA=
Subject key identifier:   3A:E5:FF:26:9E:A5:B1:16:43:59:30:23:A1:C6:AA:8D:E5:2C:F8:56
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       54ACB05A097DE6EF80D96D9067686CA85F5768BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number:          0DD8
Signing time:             Fri 09 May 2025 16:18:45 +0000
Manifest this update:     Fri 09 May 2025 16:13:45 +0000
Manifest next update:     Sat 10 May 2025 17:02:45 +0000
Files and hashes:         1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: CC/0oITT59c0Xo0FtTPapErDJT3YHvG/9+FwlRR8UZQ=)
                          2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: lx8QzDR30uz1X98OamrLwI51PJPxM4+7KzquzrFLmrs=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 17:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ac:b0:5a:09:7d:e6:ef:80:d9:6d:90:67:68:6c:a8:5f:57:68:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: May  9 16:13:45 2025 GMT
            Not After : May 10 17:02:45 2025 GMT
        Subject: CN=3AE5FF269EA5B11643593023A1C6AA8DE52CF856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:60:a6:f3:91:18:eb:0a:b6:6e:f2:36:2a:
                    3a:02:9a:da:59:8a:f7:8a:f6:f0:6a:84:6e:b4:fc:
                    b0:e3:91:ba:a0:4c:58:c7:f5:dd:01:32:96:ba:e2:
                    20:07:4b:df:de:3a:60:ae:f3:cc:90:cc:99:fb:25:
                    70:63:55:3c:58:96:8c:55:e7:df:78:d7:b0:90:44:
                    c0:a8:39:25:5c:59:52:ad:a3:b8:d5:5f:6e:66:de:
                    db:f4:94:1d:0a:0b:90:25:a6:da:56:b1:ab:c9:2b:
                    de:05:8e:18:1c:22:a5:76:02:69:93:b2:77:2f:f7:
                    3b:81:4f:68:07:7e:ad:c8:9a:43:ce:b2:b6:f8:f7:
                    79:46:1c:4b:b2:10:13:a4:fb:71:f3:56:65:71:10:
                    c2:30:a7:ee:5f:ed:43:e7:ed:85:8c:df:ff:df:5e:
                    5c:ee:88:a0:5d:c7:32:d8:79:e5:ee:bb:55:77:00:
                    ba:cc:62:64:09:29:15:a8:2d:93:aa:66:e3:ce:5b:
                    50:67:00:f5:b4:c9:78:54:29:cd:4a:4c:be:7d:51:
                    b8:3f:fc:d6:72:fd:39:24:ae:bc:58:22:8b:a1:7c:
                    f0:db:5d:8e:88:d3:d0:83:4e:02:de:2b:d0:e4:b8:
                    74:ad:38:02:f4:5f:10:a5:7e:04:62:a8:c0:70:e7:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E5:FF:26:9E:A5:B1:16:43:59:30:23:A1:C6:AA:8D:E5:2C:F8:56
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:31:f2:31:46:15:7a:73:3b:32:6a:55:d1:da:c9:dd:ac:a8:
         82:c1:78:33:07:dc:96:ea:8d:04:40:cb:b5:8b:a9:36:66:05:
         f9:a4:2e:62:30:da:0d:0b:ce:b3:06:83:d6:32:96:61:bb:e0:
         fb:72:7d:b7:a1:f9:1f:0b:4a:6d:48:94:4e:e0:63:d2:79:d8:
         bc:c9:d0:61:55:eb:bd:8c:8e:9e:e3:36:eb:dd:c5:31:96:c9:
         13:88:b5:a5:d2:db:25:a5:57:a3:38:5a:17:e8:4d:31:ad:8c:
         6f:e6:a3:a4:1e:c3:e6:f4:2d:b8:4e:2b:88:97:ed:bd:3f:0a:
         a0:53:9f:e4:13:64:51:76:b6:27:3c:f1:66:bd:ab:3d:c0:34:
         a5:1a:e5:ab:fa:12:1e:9a:c9:eb:b7:33:35:b4:25:9b:26:82:
         29:8b:b9:72:32:e5:f4:76:5d:cc:4a:60:ab:37:1a:4b:1b:fb:
         03:fb:6d:e2:7c:54:0a:bb:d9:1b:83:da:ed:08:35:6c:87:b2:
         2c:5a:7b:54:eb:6c:fe:0a:97:b0:c6:6e:8f:0e:3e:f0:11:28:
         43:a7:39:0c:f7:05:05:13:28:d6:50:f0:49:aa:da:87:7d:56:
         a8:f1:d9:df:e3:3f:0c:9e:75:44:f1:1d:34:95:c0:e7:f1:47:
         69:e1:b7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:31:07 2025 by rpki-client