Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File:                     5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier:          YXFRIc9ncT14J/NVyGW4M1Cppdyc2bg2DI3mqp9Nbbg=
Subject key identifier:   61:D4:74:C8:47:DF:12:BF:CD:AD:F5:70:A6:40:DC:47:99:41:A0:F3
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       3CC2491AFBA3FC9B7B5582A5B8ABE5B995941337
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number:          0C77
Signing time:             Thu 21 Nov 2024 20:37:08 +0000
Manifest this update:     Thu 21 Nov 2024 20:32:08 +0000
Manifest next update:     Sat 23 Nov 2024 00:20:08 +0000
Files and hashes:         1: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: lx8QzDR30uz1X98OamrLwI51PJPxM4+7KzquzrFLmrs=)
                          2: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: +gzqtwH3EyAA3VOwloWWmHtbcRUujVg5rvkazlcGDm4=)

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 00:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c2:49:1a:fb:a3:fc:9b:7b:55:82:a5:b8:ab:e5:b9:95:94:13:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: Nov 21 20:32:08 2024 GMT
            Not After : Nov 23 00:20:08 2024 GMT
        Subject: CN=61D474C847DF12BFCDADF570A640DC479941A0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:31:c6:7b:5d:55:a9:f0:00:39:8d:b1:15:
                    0d:07:09:c3:5e:66:01:ac:b6:bf:aa:f2:df:d2:cd:
                    f9:f2:c1:12:2f:b5:c1:2d:cd:60:5e:11:67:cb:bf:
                    4e:ae:a3:6b:f1:e4:ad:61:50:a1:87:24:72:46:97:
                    95:df:ad:d6:d2:25:5c:d2:84:3e:b9:9b:35:7a:31:
                    8c:3a:ab:60:ba:2b:64:0f:6a:48:2b:fc:e5:a9:e6:
                    8c:59:5e:6d:eb:40:04:74:00:e2:76:6d:ae:f2:e8:
                    b0:a2:27:fb:52:0a:56:d9:cb:a0:a3:26:d1:a4:6e:
                    8a:c7:b4:d8:7e:84:c7:b2:cc:8e:f4:2b:63:b5:05:
                    79:f8:84:8f:3e:b9:93:97:ea:9f:33:7d:7b:fc:29:
                    1d:63:53:b2:08:62:08:44:9a:2b:9a:f8:c3:80:7b:
                    8b:2f:de:a6:11:de:39:2b:f7:1b:c2:2f:a2:21:9d:
                    05:c7:f3:3e:49:90:54:ee:54:3c:53:cf:45:df:03:
                    7a:01:9a:08:9e:a3:ff:9d:a9:ba:26:ac:52:32:34:
                    a7:f7:cd:25:ce:57:38:e2:ac:f2:2c:dc:ec:8a:ab:
                    3b:ae:75:95:c9:3f:53:e7:08:b4:67:05:f4:27:62:
                    fb:be:c4:e0:89:63:96:da:0c:ea:0b:43:e8:fd:41:
                    67:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D4:74:C8:47:DF:12:BF:CD:AD:F5:70:A6:40:DC:47:99:41:A0:F3
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:05:66:4a:ea:8e:a4:47:73:fd:75:20:07:94:ff:49:69:9d:
         3e:6a:32:54:08:99:6d:bd:59:ed:20:2d:86:b9:a9:30:7c:30:
         0c:c7:c2:40:93:4f:83:f9:73:1b:3a:93:87:80:bc:3d:f8:53:
         2f:b1:d6:d7:70:af:95:cc:3d:ac:ac:83:cb:ef:a7:96:89:eb:
         9a:8c:bf:d5:7c:3f:d8:61:8a:52:93:92:f1:50:28:e7:88:24:
         45:24:2f:54:99:f1:62:93:71:4a:cb:8a:6e:9b:2a:ae:6c:5b:
         b0:2f:19:af:5c:fe:4f:5d:89:c9:1c:65:dd:ce:5e:08:be:78:
         a2:4d:b7:67:89:73:49:7b:2e:57:7e:5d:44:50:7b:a9:79:99:
         dd:12:6d:a3:cd:57:d3:79:fc:f9:50:9e:c6:98:44:15:d7:14:
         b3:eb:6d:27:3c:2d:cf:7c:3a:3d:01:37:b4:80:6d:77:54:3e:
         2c:04:a2:72:85:e9:08:d4:2a:7a:a3:6d:5c:02:89:4e:75:1e:
         11:da:87:c5:58:99:88:8d:7d:43:55:f1:8a:88:44:a1:4c:ed:
         97:ec:55:1d:50:81:e6:e1:ba:0f:a4:f1:32:50:2f:cf:84:7f:
         36:19:d3:38:63:73:e6:e0:af:05:c7:54:94:a4:d1:5a:5b:8f:
         4b:c0:c3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org