Manifest

$ rpki-client -vvf k17.pp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.mft
File:                     AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.mft (raw, json)
Hash identifier:          HXbzN8PwPL+bsIk+aZDisj18vGN3A4fHqTxjkJKcDyw=
Subject key identifier:   81:FA:A6:C4:D3:3F:F7:F9:91:AD:81:39:2B:20:A7:EA:E7:86:D3:4E
Authority key identifier: AA:2D:B5:2B:27:A0:39:A6:9D:50:82:CA:59:F8:D9:B6:A2:10:EB:B5
Certificate issuer:       /CN=AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5
Certificate serial:       5391C380762C8AEB78A1F506B03A8033BD71676B
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.cer
Subject info access:      rsync://k17.pp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.mft
Manifest number:          09
Signing time:             Wed 27 Mar 2024 13:47:26 +0000
Manifest this update:     Wed 27 Mar 2024 13:42:26 +0000
Manifest next update:     Thu 28 Mar 2024 16:45:26 +0000
Files and hashes:         1: AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.crl (hash: y4cqKtq3UbxEZHa/V2UHuRFJ1dswLBuxKn/i+eR48x0=)
                          2: 3135382e3232302e3134362e302f32342d3234203d3e20323038313632.roa (hash: kRA+OWBvXGlr4EJZdXyuPuhrNKsIb89AjgdBplt9VZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:91:c3:80:76:2c:8a:eb:78:a1:f5:06:b0:3a:80:33:bd:71:67:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5
        Validity
            Not Before: Mar 27 13:42:26 2024 GMT
            Not After : Mar 28 16:45:26 2024 GMT
        Subject: CN=81FAA6C4D33FF7F991AD81392B20A7EAE786D34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:fd:bf:f5:f6:55:95:34:f9:12:35:17:6a:
                    fd:45:5e:24:57:0f:94:6f:5b:d9:3b:9b:35:d9:9b:
                    57:9e:13:6a:84:9a:46:da:ae:32:08:cb:79:91:46:
                    f4:e4:7f:44:18:d1:3e:0d:7b:4e:1f:77:4b:db:af:
                    e6:68:c5:8c:6d:23:d8:c2:51:7a:8c:f6:92:55:91:
                    99:54:bd:25:43:d1:ef:ab:09:db:1a:34:1c:13:ee:
                    6d:95:08:0d:15:5c:ba:17:58:68:21:a4:62:84:cd:
                    1a:89:a9:cc:f9:1f:f7:77:ad:70:6a:9b:46:d6:a0:
                    f9:bf:4d:36:e8:67:a8:b4:7a:96:1e:ba:6b:b1:19:
                    d4:f3:56:12:74:04:39:41:f8:0f:fd:7c:9b:5b:ac:
                    47:31:a1:07:44:f6:44:41:47:23:0b:fa:24:b3:de:
                    9c:9c:aa:0e:7d:3c:05:ae:48:db:61:e2:1f:7f:2e:
                    5b:65:bf:91:11:c7:7f:92:e9:66:db:c0:22:f9:78:
                    4f:0e:91:12:d2:9f:49:c9:19:72:45:c6:96:ba:1d:
                    0a:08:7c:b5:1c:90:bd:a4:55:42:86:de:47:57:d5:
                    ff:77:e9:63:1d:72:2c:d9:a9:42:76:45:47:14:e7:
                    59:47:e8:71:ad:4f:5f:13:8f:70:f5:fe:5a:71:a7:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:A6:C4:D3:3F:F7:F9:91:AD:81:39:2B:20:A7:EA:E7:86:D3:4E
            X509v3 Authority Key Identifier:
                keyid:AA:2D:B5:2B:27:A0:39:A6:9D:50:82:CA:59:F8:D9:B6:A2:10:EB:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k17.pp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://k17.pp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:7f:7a:47:cb:89:3f:63:c3:35:2c:1e:a3:1a:ce:62:f1:
         a9:2d:f8:65:83:3f:47:2c:75:77:14:2f:7e:5d:15:a3:6c:c5:
         a7:f5:37:e0:a7:8f:f6:04:2e:e5:a9:49:5b:5f:e7:ca:3e:b3:
         6e:42:f3:6d:8e:1a:0e:e0:33:6f:2e:83:d7:cd:fa:09:bd:d8:
         75:c1:92:14:09:14:d0:11:33:34:b8:64:1a:bb:ed:17:65:37:
         b1:d2:50:cc:b6:55:16:29:ef:ec:ac:3f:54:7b:bd:5c:98:9b:
         da:03:8b:36:8a:a2:9c:0b:c1:2a:b2:d4:94:cf:11:f2:d5:c8:
         e8:49:b3:df:0e:92:ae:60:33:8e:a6:2b:5b:4f:1a:85:18:e0:
         b4:03:df:d4:78:66:de:77:ff:42:6c:24:bf:3d:a1:7b:6c:66:
         14:fd:5d:51:8d:cd:40:8e:da:c4:f0:e8:48:51:26:f9:46:60:
         bb:53:50:52:0d:38:b3:7c:a6:3a:a3:7a:95:fa:a9:ee:cf:02:
         9d:71:f8:a7:0d:f2:eb:a4:72:dd:11:9a:98:53:72:36:3a:38:
         ab:b8:4f:8a:25:52:8d:c5:1a:fd:99:3a:1e:5e:1e:90:90:18:
         7b:f7:da:a5:3b:ad:b8:71:7a:f8:8d:e1:b1:09:94:82:db:83:
         4c:27:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----