Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File:                     5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier:          658/eEcqLCJOTKnOFhnOS7WMRUMttJpWH8xwi9jiioQ=
Subject key identifier:   9C:31:A9:50:8B:40:8E:E9:C9:E4:A6:64:30:67:90:E6:7B:E3:33:4D
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       536E044868FECE8F413D75B8BD622025BD43F7B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number:          0EF8
Signing time:             Sun 07 Sep 2025 18:05:32 +0000
Manifest this update:     Sun 07 Sep 2025 18:00:32 +0000
Manifest next update:     Mon 08 Sep 2025 19:11:32 +0000
Files and hashes:         1: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg=)
                          2: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: a02BaQXWhjmmQYR/DZk+hjTddGpdMAG9mL76hJX3J4Q=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 19:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6e:04:48:68:fe:ce:8f:41:3d:75:b8:bd:62:20:25:bd:43:f7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: Sep  7 18:00:32 2025 GMT
            Not After : Sep  8 19:11:32 2025 GMT
        Subject: CN=9C31A9508B408EE9C9E4A664306790E67BE3334D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:9f:f8:ae:34:7c:f7:be:7c:a5:bd:7e:83:
                    c9:f7:8c:04:ff:1d:e4:1d:2c:fa:3b:b1:11:fa:a5:
                    26:34:8e:c4:90:d1:ae:2e:eb:5e:90:85:ee:ac:26:
                    06:32:f3:db:53:d5:55:f5:c8:6f:9a:cd:95:79:03:
                    40:f7:bc:df:4d:f6:66:bc:b1:37:05:99:af:b0:4f:
                    0a:a4:5a:f8:9c:15:9d:9a:1b:28:fd:50:18:42:26:
                    36:a0:ec:9c:3c:3b:6d:8a:de:52:fa:f5:c6:b8:48:
                    4f:ff:9d:d9:53:b2:72:db:59:99:53:35:39:4c:3c:
                    36:e5:8a:0f:37:fb:f4:dc:7e:41:d9:84:ce:6a:21:
                    7f:dc:6c:ec:cc:bb:e1:7e:06:66:5f:ce:14:03:ac:
                    26:d1:d7:17:ca:f3:1c:87:6a:48:5e:40:0c:e5:92:
                    b4:d8:ff:a0:48:4c:5c:1a:8d:5a:72:2b:fd:f8:ba:
                    f9:e4:77:dd:ac:ea:12:2b:63:0e:f6:9a:66:c8:ad:
                    dc:88:ab:82:27:41:9e:20:db:c2:e6:fa:d1:52:64:
                    3a:1c:3a:20:e3:64:57:cf:52:d0:64:71:35:ad:55:
                    0a:da:8f:19:b4:92:58:87:92:45:0f:74:c7:02:d7:
                    8b:10:13:ac:72:7c:c9:84:00:14:6a:4d:e7:7b:86:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:31:A9:50:8B:40:8E:E9:C9:E4:A6:64:30:67:90:E6:7B:E3:33:4D
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:49:cf:bc:3d:23:a7:cb:a2:ab:0c:73:1c:cd:e7:5a:60:7f:
         21:11:3e:2a:87:9c:d9:29:8c:6a:7e:4c:00:dc:c6:a9:64:0d:
         30:4c:d1:51:fc:bf:d0:f0:d3:fe:4b:79:5a:d5:95:91:ee:35:
         5e:88:3c:c2:f4:76:f5:f9:9f:2f:97:b8:13:15:99:c0:fa:8c:
         6e:6d:e3:8b:d0:a4:f3:ae:d0:b2:30:f9:ed:25:f8:ee:fa:12:
         df:94:dd:a5:06:e0:36:d4:4a:f5:35:38:44:e3:34:3d:f3:ba:
         4d:1e:56:c7:61:8f:ba:26:45:03:e0:8f:3f:fa:47:d7:d2:2d:
         57:d0:f4:27:ef:cc:58:0f:d4:22:99:6b:02:e9:1c:a9:eb:84:
         16:f1:6c:70:94:a0:26:ef:4f:58:45:1f:cd:c3:33:f3:c3:cd:
         eb:5d:c1:1b:8f:00:07:2b:8b:9d:76:d2:6f:e2:11:2b:28:cc:
         51:27:51:84:75:84:ef:2b:f5:aa:9b:3e:2a:2c:32:65:39:3d:
         9b:72:0e:9b:97:2f:7f:60:13:cb:94:7d:37:02:0a:ef:24:82:
         0e:0d:be:86:89:c5:0f:5e:dd:b0:a0:92:31:a3:1d:59:0e:29:
         cb:0b:d2:95:99:90:b3:e8:fe:b4:b6:6d:7d:5b:15:1d:91:93:
         09:7e:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:31 2025 by rpki-client