Manifest
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
File: FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft (raw, json)
Hash identifier: LTWzequp4dcewYSaovNSAWpSKbkGRd5UpG5DoEhqZyo=
Subject key identifier: AF:CE:1B:57:E3:B6:CF:12:5C:91:27:34:BD:4E:28:4E:F0:4B:34:E7
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Certificate issuer: /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial: 5D8C433A03C8B03434F079C7FD9CD827C944CE5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
Manifest number: 09CF
Signing time: Fri 31 Jan 2025 10:57:30 +0000
Manifest this update: Fri 31 Jan 2025 10:52:30 +0000
Manifest next update: Sat 01 Feb 2025 11:39:30 +0000
Files and hashes: 1: 3134322e3230322e39302e302f32332d3234203d3e203533333536.roa (hash: Pia9iRgOsPttGwoQ4bXufmCHjYOmqaRoY5S3e1eIJNk=)
2: 32332e3139312e38302e302f32342d3234203d3e203533333536.roa (hash: k77IeAnfskBE5OZN5saUH0E15/XKQJ9+nDXODwPEHpI=)
3: FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl (hash: Kkk6VOFxfqAg1o1qbxpGuCGNaXrYyi7dsuL3Cpy5FfY=)
4: 323630323a666331633a6661303a3a2f34342d3438203d3e203533333536.roa (hash: 2lKflUZyNYLgugil5O0C7InvzGS/k4+taPBnOLYjNUc=)
5: 323630323a666331633a3a2f33362d3434203d3e203533333536.roa (hash: X2K0uhO0hKrVwVvDmyNvmmgqT8uptcdKQ88lJso+mSs=)
6: 3134322e3230322e39302e302f32342d3234203d3e203533333536.roa (hash: K2vyEvmIfwQCrvosk/b1fyjsdno5tTxyjdBs+L510yE=)
7: 3134322e3230322e39302e302f32342d3234203d3e20323135313837.roa (hash: Ln5C9wen28B1Uf/X97WclY3sauH96D1ULAfBRe8EXLo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8c:43:3a:03:c8:b0:34:34:f0:79:c7:fd:9c:d8:27:c9:44:ce:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Validity
Not Before: Jan 31 10:52:30 2025 GMT
Not After : Feb 1 11:39:30 2025 GMT
Subject: CN=AFCE1B57E3B6CF125C912734BD4E284EF04B34E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:a4:06:91:54:22:61:b8:b6:6f:3e:69:ba:
bc:91:82:3e:bf:d8:6b:67:d2:df:26:ac:23:21:3a:
c7:8d:47:c2:5d:9e:ed:ca:49:e1:2a:fc:47:1e:89:
53:9a:6c:a6:70:f2:4e:6e:29:1a:60:2a:17:bc:3f:
41:b1:8c:0d:80:2a:2b:e0:1f:d9:01:d9:2b:36:0e:
99:53:e3:ab:c1:eb:60:a9:6e:15:f4:cf:40:85:97:
e0:82:f8:e1:b9:e7:16:94:6c:78:b1:60:07:87:48:
d6:5d:0f:aa:7b:82:dc:0a:66:75:1f:11:9c:35:33:
72:ca:b6:a8:4a:7f:f3:ea:97:79:28:e1:b0:68:38:
a3:e0:1a:e3:cb:fc:b5:ee:5d:0a:37:15:f0:d3:bd:
c1:9a:22:e2:ca:11:0f:aa:56:38:a1:ac:2d:b9:f1:
c2:0a:ce:a9:5d:d9:62:e8:5a:95:c4:fc:32:6e:d5:
a8:2b:9a:45:ac:3c:a2:f1:31:13:e9:32:c4:cf:ec:
9d:25:4a:aa:a0:a9:7f:2b:e3:a0:25:10:80:2b:fd:
0c:28:2b:a6:78:05:b9:62:c4:ad:f9:21:30:1a:78:
b1:b4:60:3d:a8:e2:e9:b2:70:c3:57:79:af:0f:66:
02:d5:eb:af:ee:66:9f:06:fe:f9:cc:79:98:61:b6:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CE:1B:57:E3:B6:CF:12:5C:91:27:34:BD:4E:28:4E:F0:4B:34:E7
X509v3 Authority Key Identifier:
keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b4:22:a5:04:30:c2:b5:cf:b0:43:92:8e:7d:c7:88:92:21:
6d:75:3d:ee:21:eb:a1:41:67:bd:10:ea:2f:2b:76:f0:e7:98:
eb:aa:7c:10:ab:63:09:46:36:03:e1:91:f1:88:de:3c:83:9b:
26:9d:1f:c5:8c:ed:42:69:db:e3:40:4c:8b:d0:91:b2:69:fe:
86:2e:ee:f4:20:bb:70:93:00:3c:ad:35:93:37:76:61:d5:4c:
03:4a:5b:6b:53:bf:00:69:05:a3:79:ae:9e:f1:fc:78:5e:25:
6a:a7:70:d2:ce:ca:59:2e:fc:ea:8e:46:86:de:c5:c6:4e:74:
20:e8:47:75:ed:76:61:2b:63:48:51:b8:3c:50:f6:be:f4:f9:
13:f0:0d:f7:1b:79:c9:3e:4d:f3:ef:b2:4d:42:25:83:9c:10:
6f:44:91:a1:02:3b:c9:ab:af:f8:b7:f9:ba:32:56:1c:8d:de:
ec:d1:53:73:f3:c3:70:74:13:ae:9d:8a:d9:b6:41:67:0e:0b:
1b:f5:d6:22:84:2e:fd:d2:2c:8f:ee:18:47:f1:db:b7:fe:07:
c7:05:13:ab:8c:84:07:b0:94:76:52:37:be:15:17:6d:d8:a3:
6a:2a:d1:99:cb:48:0f:9a:28:f2:ee:89:09:b4:8d:52:05:48:
53:66:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:19 2025 by rpki-client