Manifest

$ rpki-client -vvf k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.mft
File:                     3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.mft (raw, json)
Hash identifier:          VE1TT8FmOj5EBaoF9PQcLaRtpahRFrEU0+biPiA3Dcw=
Subject key identifier:   00:03:9B:60:DE:EB:B8:B1:84:01:12:6D:47:B8:53:28:51:93:36:3C
Authority key identifier: 3B:FA:6E:79:84:FC:DB:AA:BE:BE:AA:23:DC:06:E0:20:58:A5:F8:8F
Certificate issuer:       /CN=3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F
Certificate serial:       076271E783F689C13E1AACD2C6F899FAF72057E2
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.cer
Subject info access:      rsync://k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.mft
Manifest number:          0A
Signing time:             Tue 02 Apr 2024 19:14:10 +0000
Manifest this update:     Tue 02 Apr 2024 19:09:10 +0000
Manifest next update:     Wed 03 Apr 2024 21:44:10 +0000
Files and hashes:         1: 3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.crl (hash: xEu9cfkQB4ctXbtzuw94dfuKNCQWOArUAUL1X5Lrh/Y=)
                          2: 3135382e3232302e3136322e302f32342d3234203d3e20323038313632.roa (hash: 03qz6+Sr0vWZZEuZ2iMxKyuPyOr6SeBCyO8KEB2eckg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:62:71:e7:83:f6:89:c1:3e:1a:ac:d2:c6:f8:99:fa:f7:20:57:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F
        Validity
            Not Before: Apr  2 19:09:10 2024 GMT
            Not After : Apr  3 21:44:10 2024 GMT
        Subject: CN=00039B60DEEBB8B18401126D47B853285193363C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:d0:73:b8:6f:9e:2f:f1:18:49:f4:16:09:
                    57:f6:89:19:cb:94:75:14:20:3f:8d:86:3f:b0:88:
                    5e:de:93:4f:f5:65:d5:d5:e1:d0:95:86:d8:7d:cc:
                    29:c5:8c:e6:7b:bb:d4:89:58:d1:cb:86:1d:bf:80:
                    4b:4a:a2:9a:f0:21:ba:a8:ae:30:f5:45:f8:a6:97:
                    87:2e:4e:ee:c5:a4:00:70:9b:cf:0b:bc:6a:2f:7d:
                    c0:53:0e:0a:4a:f0:83:24:3f:8b:7c:7c:1d:c5:41:
                    eb:43:47:76:31:76:65:1a:4f:8e:ae:63:17:5a:8c:
                    4a:e2:fe:ad:74:4a:e6:2e:1f:99:12:32:fc:21:cc:
                    86:db:67:92:46:11:cf:02:fe:b1:6b:9c:bc:2c:16:
                    ee:f6:2d:22:df:a7:0e:b9:7a:1a:a0:20:72:e4:06:
                    92:08:9d:72:e8:77:1a:9a:55:a6:92:32:8e:c0:98:
                    f7:ef:b5:8a:82:f2:0d:9a:ff:e2:a5:90:6c:fd:0e:
                    e7:8d:8a:54:65:99:0e:06:4e:be:76:69:76:26:e5:
                    38:2f:c2:97:c0:96:cf:8c:3c:e2:34:ae:51:34:2f:
                    0c:b6:5c:b1:92:e7:a0:8e:83:03:a6:8f:dd:8f:33:
                    54:8a:7d:9f:75:24:05:24:d0:fe:40:e3:c5:99:0c:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:03:9B:60:DE:EB:B8:B1:84:01:12:6D:47:B8:53:28:51:93:36:3C
            X509v3 Authority Key Identifier:
                keyid:3B:FA:6E:79:84:FC:DB:AA:BE:BE:AA:23:DC:06:E0:20:58:A5:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6c:01:2a:dd:d7:3c:19:1e:22:bf:37:39:d0:dc:2e:4f:57:
         a7:20:1b:9b:59:b6:fd:4b:d2:ec:98:c4:a4:dd:ba:a9:9e:81:
         bc:ea:cf:c7:95:3f:c1:e3:ed:98:bc:ad:59:c1:71:36:91:ec:
         a1:b3:1f:08:39:f4:34:da:9f:a1:24:d3:bc:0f:6e:56:ba:85:
         de:6a:ae:92:45:68:7a:01:9f:7d:fa:70:ab:73:03:b7:67:7e:
         fc:84:b8:6a:7d:77:4d:7f:ad:af:cf:25:5d:fa:0c:cd:ee:d3:
         18:35:12:60:ae:84:58:70:90:c4:ae:6a:05:7a:96:71:69:8d:
         2d:b7:e3:b5:8d:73:e3:43:52:8d:d7:48:84:c6:29:c8:74:53:
         f2:ee:02:84:87:5f:70:85:86:83:2e:8e:8e:5c:56:28:01:f8:
         cb:4a:bd:d0:48:00:a3:d1:20:53:22:41:ff:3d:88:30:ed:6d:
         36:ae:c9:e1:d4:49:3e:55:dd:5a:74:95:82:61:33:df:35:e2:
         d0:71:1a:d1:8a:78:e9:e0:1d:5c:91:2c:e0:39:b8:9a:b7:41:
         b0:22:15:f1:92:2e:eb:32:6b:dd:d4:50:7f:4e:2b:db:6f:43:
         16:a2:e9:d1:65:b0:af:a7:49:40:d3:36:e9:d5:1d:ff:ce:6b:
         fd:42:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 02:11:39 2024 by rpki-client on console-ams.rpki-client.org