Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File:                     5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier:          ruKIHbkoGlE/qkUxuZO4mSu+UAs22UlN1d6p2HBnAI4=
Subject key identifier:   12:B1:87:7B:79:01:78:F5:EE:19:B8:6D:6F:0A:C4:90:5E:8E:0B:0B
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       6E5B211AB571CE594E6415F295BA619FE7E38161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number:          0A97
Signing time:             Sun 19 May 2024 17:23:42 +0000
Manifest this update:     Sun 19 May 2024 17:18:42 +0000
Manifest next update:     Mon 20 May 2024 18:42:42 +0000
Files and hashes:         1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: Li8kDVi91g4+QxOXL1IRnqJjxCgog64x0YRqnWQZBio=)
                          2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: znJ+bfWpmES6we7ZOdYKPIqt2M+CAKrW9+wvT2SP0UY=)

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 18:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5b:21:1a:b5:71:ce:59:4e:64:15:f2:95:ba:61:9f:e7:e3:81:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: May 19 17:18:42 2024 GMT
            Not After : May 20 18:42:42 2024 GMT
        Subject: CN=12B1877B790178F5EE19B86D6F0AC4905E8E0B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f4:99:d2:8a:32:d7:a6:80:66:d9:e3:95:85:
                    37:47:3f:dc:49:52:45:91:a3:77:f5:85:66:af:ba:
                    77:fb:ef:40:32:80:26:ea:77:7c:15:f2:52:71:4b:
                    27:bf:46:9f:3c:6f:c8:1e:c3:3a:d6:b7:5b:ad:c1:
                    ec:54:40:38:de:ef:93:75:ba:73:20:c5:35:8c:af:
                    68:19:e6:56:e0:92:f0:d8:b5:16:9d:46:b7:c7:1f:
                    cc:44:45:7d:f3:0a:30:6e:ae:25:db:9c:ac:44:cd:
                    84:45:89:ac:aa:62:36:4b:a6:5e:61:5d:73:e4:fa:
                    e4:2e:77:2a:26:1c:7e:3e:87:fb:3d:cb:63:8c:de:
                    53:e7:d9:15:a1:80:58:0d:95:c4:9d:b7:4a:e9:06:
                    81:dd:6d:00:71:bd:75:14:22:1b:77:2a:8e:5e:cb:
                    1c:32:a7:73:51:2e:d2:99:2c:81:02:97:80:cc:a2:
                    3d:8b:1d:7d:c0:16:54:1a:db:8f:86:ce:f4:fe:e9:
                    25:5b:b3:c8:56:13:e0:f9:e1:95:eb:28:b4:aa:e2:
                    6c:b1:3d:73:d2:2b:dc:75:f8:31:e6:1b:5a:0e:54:
                    13:01:ae:97:89:4d:03:aa:84:70:2a:60:ce:b0:72:
                    bc:ed:4f:a3:82:b4:7f:1c:5a:eb:b1:bf:bb:b5:b0:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B1:87:7B:79:01:78:F5:EE:19:B8:6D:6F:0A:C4:90:5E:8E:0B:0B
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b0:c9:9a:ec:52:25:9c:38:a2:d4:a0:5c:fb:05:48:6d:ed:
         97:7d:1b:fd:4e:e6:82:3e:9b:9b:3d:27:30:84:f5:a4:11:40:
         14:eb:84:58:37:ec:d7:a8:49:66:47:ad:a8:79:aa:18:99:58:
         fd:0f:5f:d3:78:aa:ab:40:38:cd:60:fc:f6:33:20:4f:38:a1:
         a0:71:10:f7:cd:37:ae:f9:80:bc:ef:45:cf:57:68:7c:47:0c:
         59:6f:c1:01:2d:ec:16:4f:04:7c:c0:35:7c:52:b4:d7:48:e5:
         83:c2:b1:42:51:23:f6:68:ae:6f:72:61:0b:fa:8f:fd:5f:d0:
         9c:63:21:cd:c6:4f:a7:80:8a:fe:56:dc:c2:49:47:7d:d9:0f:
         de:73:59:02:77:05:29:c4:d3:66:c9:b9:49:80:b9:59:f3:9a:
         8a:03:07:fb:e8:19:95:b0:c0:3a:6c:14:08:a0:45:3d:a0:86:
         0d:d9:42:89:69:6b:8a:e4:f4:9d:c7:c2:32:bd:6f:b1:03:75:
         78:73:c2:40:36:d2:9e:dd:45:a6:44:f5:b0:37:ff:41:56:62:
         09:59:1e:50:9d:2b:a8:c2:e9:29:08:b5:5d:de:3b:91:33:40:
         bb:bc:0f:4e:69:04:43:59:73:6b:b0:25:c0:22:cc:95:49:35:
         1d:d8:d3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:54:15 2024 by rpki-client on console-fra.rpki-client.org