Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.mft
File:                     EC0FF27C66F3730ECC006C25E94D0A070B8707DF.mft (raw, json)
Hash identifier:          Lgxmv2blq6CU2gCq5hDzFyf64LNwqnKGbnHjDr1kHII=
Subject key identifier:   4C:5D:3C:D7:A8:F3:08:3C:80:5E:EE:90:3C:91:1E:CC:9E:20:CE:3C
Authority key identifier: EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF
Certificate issuer:       /CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
Certificate serial:       1BFDCB73FBFBB6E93A9807FAA3581EFC174DC4E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.mft
Manifest number:          90
Signing time:             Tue 02 Mar 2021 21:02:00 +0000
Manifest this update:     Tue 02 Mar 2021 20:57:00 +0000
Manifest next update:     Wed 03 Mar 2021 21:02:00 +0000
Files and hashes:         1: EC0FF27C66F3730ECC006C25E94D0A070B8707DF.crl (hash: Q9RzSSoZVYaGA1u4E+xvZtnwdMaNd2TItp1WWU0g1hU=)
                          2: 34352e38352e3235302e302f32342d3234203d3e20313431313538.roa (hash: c9uvXanXE2kKrnzAlVe2e4JDAfdrI2izEy/X8T0mCMY=)
                          3: 34352e38352e3235302e302f32342d3234203d3e203136353039.roa (hash: 8adAZIY7L6+YgFFUDH0vt1g6QMKmO15i5xis5kUI/BE=)
                          4: 34352e38352e3234392e302f32342d3234203d3e203631333137.roa (hash: TEgxIs4K8Mh+ielupX3kNy1It7q8KG+8rC6INilJoVc=)
                          5: 34352e38352e3235302e302f32342d3234203d3e2037383431.roa (hash: U7Ggmt5l2cSlX1PLhxnwY/jPyw1TbtdPOH9mnEhrwE8=)
                          6: 34352e38352e3235302e302f32342d3234203d3e203134363138.roa (hash: lbm+Yca6J/irY2+u/93iW7FwKBXPVkaov7DYoLjFsv8=)
                          7: 34352e38352e3235302e302f32342d3234203d3e203631333137.roa (hash: VIoH5YhbOe2p9amr0Dh4jZz4MyY1ACEj+sYeL0UlH1w=)
                          8: 34352e38352e3234392e302f32342d3234203d3e20323031303131.roa (hash: rOE78DaChxr4HH1dntxA9wjPaYcLZtexSx6cdJpNvFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fd:cb:73:fb:fb:b6:e9:3a:98:07:fa:a3:58:1e:fc:17:4d:c4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
        Validity
            Not Before: Mar  2 20:57:00 2021 GMT
            Not After : Mar  9 21:02:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:d5:37:e3:2d:78:b8:f3:0d:ca:96:b0:2b:
                    e4:ee:cb:43:46:30:42:97:6f:cc:51:9f:80:b0:9d:
                    d9:08:d4:a6:b9:e1:77:60:2a:61:ec:9d:08:22:37:
                    23:a0:24:ba:a5:c7:08:98:63:6f:f3:4b:1d:7f:03:
                    20:db:ff:93:5d:ce:56:72:48:7d:af:1b:46:1f:d6:
                    24:f6:66:63:55:38:87:20:c7:94:d1:14:b0:63:ca:
                    37:ed:03:a8:62:bc:0c:e8:9f:8a:5d:00:17:24:76:
                    da:c8:4c:b8:e8:6c:45:26:0f:f2:6b:71:d8:d2:1b:
                    0e:c8:37:d6:44:db:e1:da:27:b4:09:63:8c:c1:02:
                    c3:29:e5:2c:5b:49:2a:2c:2d:27:2a:5b:e2:85:bc:
                    b7:fa:bc:43:1d:04:43:ef:1a:c9:8e:2b:02:c6:17:
                    b3:06:95:90:ec:1e:7b:06:6c:7f:f7:17:16:57:4d:
                    a0:07:de:b2:53:86:29:78:0c:58:97:19:6a:d6:65:
                    36:0b:59:d7:66:ed:68:6a:c2:e1:f4:82:70:1b:d8:
                    e6:02:9b:17:f9:5c:94:59:04:e0:41:be:bb:6d:21:
                    0f:ef:89:b2:62:cd:8d:f6:85:09:5b:9c:6e:85:a1:
                    c1:bd:b0:39:43:e4:ab:2f:b6:b6:3b:27:1a:fc:ab:
                    5b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5D:3C:D7:A8:F3:08:3C:80:5E:EE:90:3C:91:1E:CC:9E:20:CE:3C
            X509v3 Authority Key Identifier:
                keyid:EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:59:60:8b:4e:62:81:7e:52:a1:1e:0c:b2:4c:a2:8f:fc:
         d4:94:d5:98:aa:07:cb:4d:24:4b:e3:a3:56:d8:1f:74:11:3c:
         0c:b2:09:e0:f0:ce:d3:6d:e1:37:a3:17:90:20:1d:f0:52:f5:
         ce:dc:34:5e:95:79:ce:ea:40:61:37:59:10:0e:16:01:e9:48:
         59:1b:da:c1:19:01:91:de:f2:65:3f:7b:bb:ee:d9:37:4e:e7:
         91:61:e7:5f:27:f7:d6:81:3a:52:8e:2e:1e:24:07:22:19:37:
         d4:15:aa:79:f4:b7:22:88:09:c2:cc:02:be:60:c9:b0:83:60:
         9a:ea:e4:f6:aa:e2:b9:63:08:e7:f2:c4:9f:10:0f:73:c2:56:
         13:f3:c0:4c:b8:fc:ee:b1:b7:79:b7:16:f4:59:23:f9:ed:41:
         4d:93:b3:fb:27:4e:68:02:93:7c:44:d7:21:ed:b0:36:70:fd:
         d9:98:26:9d:17:e2:5f:dc:b9:72:3d:20:ec:ba:b9:a1:4c:40:
         ac:30:2c:86:f5:c1:f7:73:cc:22:40:51:a0:ab:b3:24:cb:70:
         64:63:0e:0b:de:5e:e1:90:aa:07:17:52:8f:5f:4a:ca:f3:6e:
         e0:4f:89:82:aa:50:4f:ed:82:8a:eb:48:ee:16:50:7a:3e:0a:
         57:35:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----