Manifest

$ rpki-client -vvf k20.pp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.mft
File:                     D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.mft (raw, json)
Hash identifier:          pXGyRFi5u0IyiAdAwdOpP9EXNvj2l2lkmVHIx10l8u8=
Subject key identifier:   ED:10:5C:78:B1:40:39:CF:F6:70:3C:93:C9:0E:43:29:44:98:73:2C
Authority key identifier: D3:E7:DF:18:29:C6:70:B6:43:20:F4:DF:0B:7C:DF:BC:E6:73:84:86
Certificate issuer:       /CN=D3E7DF1829C670B64320F4DF0B7CDFBCE6738486
Certificate serial:       4C51111B4CA83E4FEF6611FBB741F082DC8025DE
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.cer
Subject info access:      rsync://k20.pp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.mft
Manifest number:          08
Signing time:             Wed 27 Mar 2024 02:47:28 +0000
Manifest this update:     Wed 27 Mar 2024 02:42:28 +0000
Manifest next update:     Thu 28 Mar 2024 05:36:28 +0000
Files and hashes:         1: D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.crl (hash: 5Ku1wWnKDBsmKOfI8PkFK4/Y8GRMe/jyaYmgZr/xs9I=)
                          2: 3135382e3232302e3134392e302f32342d3234203d3e20323038313632.roa (hash: ZXusEN/AP2BP8Jt7EpAoyhY/zJ7/L5Nj5Uo0Vorw02M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:51:11:1b:4c:a8:3e:4f:ef:66:11:fb:b7:41:f0:82:dc:80:25:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3E7DF1829C670B64320F4DF0B7CDFBCE6738486
        Validity
            Not Before: Mar 27 02:42:28 2024 GMT
            Not After : Mar 28 05:36:28 2024 GMT
        Subject: CN=ED105C78B14039CFF6703C93C90E43294498732C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:c8:a5:9a:7d:eb:ab:5e:29:02:ba:11:43:
                    ce:01:9d:35:e7:65:db:e3:1a:c6:15:ba:c1:53:39:
                    b3:0d:1f:6f:fb:77:11:31:0b:65:5e:ee:85:d6:06:
                    27:f2:02:98:a7:76:8f:3b:0a:1b:ed:0f:84:10:1b:
                    e7:3c:a5:00:49:79:6d:75:4b:58:ca:d7:3e:69:27:
                    f8:2d:6a:4c:34:c0:98:06:8e:92:7c:4a:0e:53:b1:
                    e5:fb:f9:1e:bd:4c:80:89:c2:85:36:90:80:62:0e:
                    28:a4:b4:5e:e4:ed:74:60:6a:a1:48:e3:c9:c6:c7:
                    20:25:8c:5d:0f:bd:a4:d7:4f:51:17:7b:75:34:e9:
                    c2:4a:55:5b:e3:f6:a2:ec:6e:a5:ab:b0:a2:1e:da:
                    bc:bd:b7:17:37:d7:7d:99:6f:25:65:e6:34:9b:9e:
                    7b:f0:d9:68:27:d2:e6:01:e6:f9:33:e5:15:12:cc:
                    88:2e:e2:9b:83:03:fe:c7:1f:6a:4b:77:b1:73:ac:
                    8d:71:c2:44:b5:b3:30:23:d8:39:23:16:5e:83:49:
                    cd:7a:35:ab:f3:07:43:ba:19:79:c2:d0:5b:3b:6b:
                    e7:9d:03:f9:a4:65:d3:12:20:1d:04:6a:01:56:5e:
                    a0:01:60:a6:e1:49:33:a9:b7:cd:0a:c1:86:37:ec:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:10:5C:78:B1:40:39:CF:F6:70:3C:93:C9:0E:43:29:44:98:73:2C
            X509v3 Authority Key Identifier:
                keyid:D3:E7:DF:18:29:C6:70:B6:43:20:F4:DF:0B:7C:DF:BC:E6:73:84:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k20.pp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.cer

            Subject Information Access:
                Signed Object - URI:rsync://k20.pp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6a:85:fd:b4:19:93:78:45:4e:69:18:42:15:24:a4:c4:bf:
         85:66:9f:b4:f7:f4:8e:7c:e2:bf:0a:59:70:50:76:36:6c:8f:
         0d:ec:05:1c:ed:1b:05:7d:62:38:97:43:10:f9:7c:92:e4:c0:
         77:f8:15:78:36:91:0a:8b:d7:a8:77:ec:cc:08:41:d5:29:52:
         8c:17:ca:81:17:d6:0d:d1:bb:e8:77:26:42:d5:88:dc:61:24:
         dd:8d:db:3d:42:77:3c:07:a1:e2:d7:a4:1f:ae:ba:d7:c7:4d:
         48:16:87:76:07:16:eb:2b:7f:aa:f0:6f:57:10:27:98:f5:5c:
         dc:7f:ae:cc:de:68:54:52:6a:92:00:62:89:d9:1c:71:a2:11:
         d4:3e:af:27:ec:e1:97:b0:4a:f1:cc:97:4e:2d:75:98:fe:32:
         e4:d0:89:92:e3:e9:b9:8e:20:34:f9:69:2f:23:78:d5:6e:a4:
         69:3f:72:1c:04:ab:dd:6f:76:1a:01:27:98:47:05:57:9d:49:
         80:44:ca:d1:ec:8c:38:cf:8b:c8:89:c9:e9:79:75:70:34:f8:
         81:14:76:16:c6:5c:5a:21:67:46:a5:2e:bd:ec:38:ef:44:82:
         ea:a8:e7:c4:ca:8c:e8:2b:cd:8a:e3:16:45:d7:cc:9b:d2:7c:
         6e:07:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----