Manifest
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File: 5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier: AbROIHNUW33jV4K8yENDu2O8aqb+fNodFYFOr7C8uVA=
Subject key identifier: 96:59:00:C7:28:11:FC:CD:07:53:1C:C9:32:B3:C9:A9:70:46:78:D2
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer: /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial: 7A5F4F53DF5C4D4452A73395238A9EE1707CED0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number: 0D09
Signing time: Fri 31 Jan 2025 10:32:20 +0000
Manifest this update: Fri 31 Jan 2025 10:27:20 +0000
Manifest next update: Sat 01 Feb 2025 14:20:20 +0000
Files and hashes: 1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: OBvBx2xhCzsff2698f9unUffXg8MqjGKGvW8sS2tQd0=)
2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: lx8QzDR30uz1X98OamrLwI51PJPxM4+7KzquzrFLmrs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5f:4f:53:df:5c:4d:44:52:a7:33:95:23:8a:9e:e1:70:7c:ed:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Validity
Not Before: Jan 31 10:27:20 2025 GMT
Not After : Feb 1 14:20:20 2025 GMT
Subject: CN=965900C72811FCCD07531CC932B3C9A9704678D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:60:4c:6d:49:11:c4:03:07:df:79:3d:69:
c3:15:c9:dc:ba:f0:f0:5d:61:a2:05:3e:ea:2f:55:
3b:dc:4a:01:4a:8f:08:52:4f:70:19:d6:2d:dd:d7:
24:76:08:8a:9c:e8:fe:a2:49:bb:bb:2a:e0:e7:66:
7b:27:90:25:21:51:18:ed:ff:be:a5:cf:9e:98:82:
dd:e6:74:a4:7d:67:9f:3a:59:c7:b7:d3:6a:25:20:
86:3e:5a:bd:1a:50:af:5c:13:9d:56:8a:dd:92:d5:
ce:b3:e3:e6:30:1f:d1:66:07:31:bb:16:1c:34:8d:
8d:0e:84:29:34:91:25:71:4e:a1:19:94:55:f8:23:
77:13:7e:5a:42:20:db:f7:06:7a:b7:f3:40:75:6c:
da:b4:a4:c4:bb:75:e1:d6:be:8e:92:d7:5f:74:f3:
f2:30:ca:26:58:0c:0c:94:be:bf:df:cb:3d:1d:c7:
bd:03:5d:b2:43:a5:56:4b:18:10:81:4e:af:b3:ae:
6f:29:89:5d:81:c2:2b:37:7d:a3:52:39:b0:f6:b0:
c4:7c:64:5f:c5:0e:00:60:5d:a5:c3:bc:20:4f:63:
90:4f:ff:26:c4:2d:9e:a6:a7:14:ed:3b:25:9f:e7:
94:4c:60:63:24:fb:11:7d:d8:d2:ac:7c:e2:f2:e0:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:59:00:C7:28:11:FC:CD:07:53:1C:C9:32:B3:C9:A9:70:46:78:D2
X509v3 Authority Key Identifier:
keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:b8:61:06:37:7f:eb:df:ae:90:88:d6:6c:22:d6:c8:9c:
d8:db:7b:ec:d2:b5:fe:16:57:ba:25:ff:e2:14:bb:b1:63:28:
ab:b7:ca:74:f0:6a:cf:5d:59:7b:fb:d7:ec:84:dc:ad:12:b3:
fc:d9:82:64:45:47:6d:c9:cf:15:ac:b4:87:41:fb:80:37:26:
ad:6f:00:2e:3b:0f:c3:f0:0d:4b:e1:33:dc:11:05:0e:2c:8e:
53:a1:bd:da:67:b0:9c:33:49:3f:31:9d:97:25:bf:71:4b:aa:
d8:cc:ca:35:ad:d6:d9:ef:ab:4e:7b:fb:ff:45:4c:8e:5b:d6:
32:92:5d:49:58:39:1d:de:a2:2e:2f:2d:b9:03:d4:56:cc:b5:
c5:de:e5:f5:5c:24:c4:19:9f:5a:26:5a:fc:56:e2:12:65:c2:
d1:73:1f:26:26:f4:12:2e:23:d1:1e:db:3b:ad:71:36:59:48:
7e:75:2a:96:af:9b:4a:7e:fb:18:2d:c2:99:31:64:0b:63:9d:
f7:72:a8:93:6f:4d:dc:5a:51:23:df:47:b8:49:49:27:ff:7e:
01:85:c5:57:4b:62:75:95:e5:9f:90:61:94:7d:d6:dd:80:81:
71:68:b0:40:2f:44:34:16:6e:8b:16:9a:79:ae:fb:b6:d2:35:
a5:62:bf:fd
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUel9PU99cTURSpzOVI4qe4XB87Q0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkM4MzYwMDAwMTEwLwYDVQQFEyg1RDM1OTM5NTU3
MTEwQ0M0MzQyOUFFMzAxRjdDRUYwRTU4ODk5NDJCMB4XDTI1MDEzMTEwMjcyMFoX
DTI1MDIwMTE0MjAyMFowMzExMC8GA1UEAxMoOTY1OTAwQzcyODExRkNDRDA3NTMx
Q0M5MzJCM0M5QTk3MDQ2NzhEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKxAYExtSRHEAwffeT1pwxXJ3Lrw8F1hogU+6i9VO9xKAUqPCFJPcBnWLd3X
JHYIipzo/qJJu7sq4OdmeyeQJSFRGO3/vqXPnpiC3eZ0pH1nnzpZx7fTaiUghj5a
vRpQr1wTnVaK3ZLVzrPj5jAf0WYHMbsWHDSNjQ6EKTSRJXFOoRmUVfgjdxN+WkIg
2/cGerfzQHVs2rSkxLt14da+jpLXX3Tz8jDKJlgMDJS+v9/LPR3HvQNdskOlVksY
EIFOr7OubymJXYHCKzd9o1I5sPawxHxkX8UOAGBdpcO8IE9jkE//JsQtnqanFO07
JZ/nlExgYyT7EX3Y0qx84vLglPMCAwEAAaOCAhkwggIVMB0GA1UdDgQWBBSWWQDH
KBH8zQdTHMkys8mpcEZ40jAfBgNVHSMEGDAWgBRdNZOVVxEMxDQprjAffO8OWImU
KzAOBgNVHQ8BAf8EBAMCB4AwcQYDVR0fBGowaDBmoGSgYoZgcnN5bmM6Ly9ycGtp
LmFkbWluLmZyZWVyYW5nZWNsb3VkLmNvbS9yZXBvL0ZSQy1DQS8yLzVEMzU5Mzk1
NTcxMTBDQzQzNDI5QUUzMDFGN0NFRjBFNTg4OTk0MkIuY3JsMH4GCCsGAQUFBwEB
BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1hUV1RsVmNSRE1R
MEthNHdIM3p2RGxpSmxDcy5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzAL
hmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29tL3JlcG8vRlJD
LUNBLzIvNUQzNTkzOTU1NzExMENDNDM0MjlBRTMwMUY3Q0VGMEU1ODg5OTQyQi5t
ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN
AQELBQADggEBAFkruGEGN3/r366QiNZsItbInNjbe+zStf4WV7ol/+IUu7FjKKu3
ynTwas9dWXv71+yE3K0Ss/zZgmRFR23JzxWstIdB+4A3Jq1vAC47D8PwDUvhM9wR
BQ4sjlOhvdpnsJwzST8xnZclv3FLqtjMyjWt1tnvq057+/9FTI5b1jKSXUlYOR3e
oi4vLbkD1FbMtcXe5fVcJMQZn1omWvxW4hJlwtFzHyYm9BIuI9Ee2zutcTZZSH51
Kpavm0p++xgtwpkxZAtjnfdyqJNvTdxaUSPfR7hJSSf/fgGFxVdLYnWV5Z+QYZR9
1t2AgXFosEAvRDQWbosWmnmu+7bSNaViv/0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:13 2025 by rpki-client