Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
File:                     FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft (raw, json)
Hash identifier:          Jd4btX2zfjR8ZsDCgCS/h7ojzCX74xx3doMAJQ1NbVo=
Subject key identifier:   42:03:68:14:61:33:FC:F0:EA:6A:82:AB:67:34:39:0D:02:33:3F:4A
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       18B1750D060BFB587B91AEC6C930828EDE881BD1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft
Manifest number:          0A75
Signing time:             Tue 15 Apr 2025 19:30:41 +0000
Manifest this update:     Tue 15 Apr 2025 19:25:41 +0000
Manifest next update:     Wed 16 Apr 2025 19:48:41 +0000
Files and hashes:         1: FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl (hash: Z/H6QfFQIejTHVo3Aeh1BC5XAJCIoqu2LtXvvfdGlCU=)
                          2: 323630323a666331633a3a2f33362d3434203d3e203533333536.roa (hash: X2K0uhO0hKrVwVvDmyNvmmgqT8uptcdKQ88lJso+mSs=)
                          3: 3134322e3230322e39302e302f32342d3234203d3e20323135313837.roa (hash: Ln5C9wen28B1Uf/X97WclY3sauH96D1ULAfBRe8EXLo=)
                          4: 3134322e3230322e39302e302f32332d3234203d3e203533333536.roa (hash: Pia9iRgOsPttGwoQ4bXufmCHjYOmqaRoY5S3e1eIJNk=)
                          5: 32332e3139312e38302e302f32342d3234203d3e203533333536.roa (hash: k77IeAnfskBE5OZN5saUH0E15/XKQJ9+nDXODwPEHpI=)
                          6: 323630323a666331633a6661303a3a2f34342d3438203d3e203533333536.roa (hash: 2lKflUZyNYLgugil5O0C7InvzGS/k4+taPBnOLYjNUc=)
                          7: 3134322e3230322e39302e302f32342d3234203d3e203533333536.roa (hash: K2vyEvmIfwQCrvosk/b1fyjsdno5tTxyjdBs+L510yE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b1:75:0d:06:0b:fb:58:7b:91:ae:c6:c9:30:82:8e:de:88:1b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Apr 15 19:25:41 2025 GMT
            Not After : Apr 16 19:48:41 2025 GMT
        Subject: CN=420368146133FCF0EA6A82AB6734390D02333F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:73:00:ae:b2:b8:f6:72:6b:2e:a2:98:1a:ed:
                    ab:16:f1:19:1e:a6:0b:d5:31:50:24:3f:62:f0:22:
                    a1:f2:63:25:43:ed:19:c9:02:3a:f9:c6:cd:5d:5e:
                    72:3e:67:88:b2:79:e1:13:77:4f:08:8c:e8:a3:41:
                    23:d7:f5:aa:0c:1f:7f:4f:96:d9:30:17:f2:61:10:
                    db:5c:8f:47:ef:61:db:65:16:da:8d:d9:07:2d:92:
                    a9:89:8e:3e:41:33:b0:72:b8:46:6e:3f:14:ce:86:
                    df:ef:41:18:ca:05:31:5d:36:90:c7:36:8b:68:51:
                    61:af:3f:1f:bb:27:26:c5:12:0e:5c:dc:67:72:87:
                    d2:9a:95:97:ac:8f:89:15:15:c8:1c:d0:84:e5:da:
                    be:d5:f4:72:34:70:6d:b1:0c:18:12:0c:d6:37:f2:
                    d1:62:6c:60:dd:83:69:ad:50:47:4d:32:a0:f0:b0:
                    37:a7:a0:28:b3:de:c1:b3:a5:38:78:03:29:4a:d1:
                    07:4a:74:f2:9c:a7:60:70:68:d0:72:21:b7:cd:0b:
                    11:37:11:65:df:13:c1:e9:b8:7f:1b:3e:da:7d:ef:
                    57:8c:40:33:68:dc:04:3d:99:61:92:1b:13:3b:85:
                    86:79:fb:58:d8:e6:38:47:fc:b4:c8:9f:5c:ff:8f:
                    ea:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:03:68:14:61:33:FC:F0:EA:6A:82:AB:67:34:39:0D:02:33:3F:4A
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c5:39:3d:79:4b:ee:10:26:cd:5e:29:8f:26:c6:30:04:57:
         ac:28:6a:6f:5d:90:ed:c8:f2:55:fb:09:79:3f:0a:22:a5:7c:
         b9:09:45:a8:fa:ef:55:71:ad:ac:1d:0e:7f:21:bb:ee:41:0e:
         06:16:ea:bd:a1:62:36:00:73:82:d7:6c:be:a6:51:87:ad:33:
         d1:16:5a:c1:f6:e5:b1:20:83:7f:cc:49:ab:d5:f1:cc:c8:0b:
         0a:66:c3:b3:83:dd:51:07:c3:e7:3d:32:e3:e6:da:7e:ec:59:
         c4:04:6c:59:10:68:ff:0a:93:e6:68:76:62:c9:39:15:32:e8:
         cf:8c:ec:3c:13:82:58:b4:f1:31:9c:cb:5a:54:97:d9:e0:05:
         1e:ab:e8:dd:60:68:9e:77:a6:00:3d:04:6e:f5:33:7e:34:7b:
         e1:c9:60:bb:21:7d:c3:95:b4:bd:ad:67:77:4f:47:74:4b:50:
         17:f9:23:3f:66:2c:b7:74:e1:8b:75:74:98:bd:ef:1e:5b:d8:
         b8:10:5d:56:34:5c:35:5f:4d:60:bf:d5:14:3f:29:63:14:9e:
         60:23:72:9a:f1:e7:d2:7e:ba:29:ec:0a:6e:94:56:5d:e0:4a:
         61:dc:ef:9a:44:7b:02:57:0e:ff:b7:55:cc:47:e5:4d:43:b6:
         d0:88:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----