Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/116/D8FE8C1E01B795903B5A9A8ECD563023ABAAC285.mft
File:                     D8FE8C1E01B795903B5A9A8ECD563023ABAAC285.mft (raw, json)
Hash identifier:          1nHAkgvkg7/XAIqC3tzq2nExyAnV9DFwrsi4yTPcN94=
Subject key identifier:   02:44:81:74:1B:28:03:C2:A3:0C:CC:ED:CF:69:7C:02:EB:9F:13:82
Authority key identifier: D8:FE:8C:1E:01:B7:95:90:3B:5A:9A:8E:CD:56:30:23:AB:AA:C2:85
Certificate issuer:       /CN=d8fe8c1e01b795903b5a9a8ecd563023abaac285
Certificate serial:       667A3A4B1BB13DFBEF4558DA1BEEA6F2B3D39B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2P6MHgG3lZA7WpqOzVYwI6uqwoU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/116/D8FE8C1E01B795903B5A9A8ECD563023ABAAC285.mft
Manifest number:          2A
Signing time:             Tue 29 Dec 2020 05:08:01 +0000
Manifest this update:     Tue 29 Dec 2020 05:03:01 +0000
Manifest next update:     Wed 30 Dec 2020 05:08:01 +0000
Files and hashes:         1: D8FE8C1E01B795903B5A9A8ECD563023ABAAC285.crl (hash: WaXFhsVa2hz2/CTdUWOocGm8lR64wS1OKtXHWaU4F3w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7a:3a:4b:1b:b1:3d:fb:ef:45:58:da:1b:ee:a6:f2:b3:d3:9b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fe8c1e01b795903b5a9a8ecd563023abaac285
        Validity
            Not Before: Dec 29 05:03:01 2020 GMT
            Not After : Jan  5 05:08:01 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:b3:21:d3:d3:45:de:9b:f1:8a:6c:8b:9e:
                    2c:af:50:05:17:b9:ef:9e:fe:52:3f:e0:59:4c:43:
                    f8:d6:f9:58:b3:43:82:b1:07:ff:f8:02:03:86:0b:
                    b1:27:78:b0:3a:23:66:0e:54:e1:fd:fe:df:4a:9f:
                    e2:06:63:8f:33:44:ec:99:d3:24:29:53:cf:89:f7:
                    73:77:3a:67:53:b5:4e:8a:e6:db:9d:0a:15:33:d2:
                    d2:a6:c4:56:2e:92:05:0b:0d:2f:8b:8e:96:cf:20:
                    44:50:eb:2f:a6:b4:db:a4:19:af:21:fc:54:d2:6f:
                    ae:23:01:5e:4d:0f:73:aa:63:b9:dd:04:b7:e7:9d:
                    20:9d:3d:9f:6d:3f:4a:70:88:49:13:ae:bf:72:5f:
                    bd:d4:fa:9a:1f:40:68:9d:25:40:d0:a1:90:90:c9:
                    89:5f:b5:d0:ca:7b:c9:75:7a:71:e9:69:c3:25:23:
                    09:d8:83:26:71:8d:90:92:b2:94:18:20:48:9b:e3:
                    91:85:22:f5:8d:69:0e:2f:d9:87:dd:1b:2e:5b:8f:
                    04:aa:17:1d:19:85:38:b3:12:17:c3:82:2c:55:72:
                    3f:41:f5:e6:6c:d9:d5:ad:3c:32:04:70:37:1d:78:
                    bf:6e:05:37:ce:c8:89:89:07:e7:e9:2c:69:56:dd:
                    23:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:44:81:74:1B:28:03:C2:A3:0C:CC:ED:CF:69:7C:02:EB:9F:13:82
            X509v3 Authority Key Identifier:
                keyid:D8:FE:8C:1E:01:B7:95:90:3B:5A:9A:8E:CD:56:30:23:AB:AA:C2:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/116/D8FE8C1E01B795903B5A9A8ECD563023ABAAC285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P6MHgG3lZA7WpqOzVYwI6uqwoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/116/D8FE8C1E01B795903B5A9A8ECD563023ABAAC285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:32:a8:ed:97:e7:02:7f:e8:85:23:f2:d9:ab:f9:8c:f4:b2:
         cd:f9:73:2c:f3:f4:54:99:57:41:82:1f:87:2f:c3:22:5f:1a:
         a1:79:ef:c1:b1:4e:4b:1a:71:08:2d:8c:16:e0:08:54:55:a5:
         0a:0d:da:8f:59:54:56:f2:56:de:e5:e7:cc:03:88:6e:ff:d4:
         64:92:de:51:7c:e1:9d:db:ff:e5:87:b0:20:6b:0c:26:1e:73:
         4a:5e:b6:de:cb:6a:04:83:ed:c2:c1:e1:18:e6:af:06:2e:82:
         0d:86:e9:87:f7:bd:c1:d6:23:3b:8b:fb:10:0d:08:2f:0f:88:
         75:bf:60:d5:64:19:30:6e:65:6c:4b:b6:0d:66:7e:03:c4:e2:
         d7:50:db:c2:03:37:fb:93:a1:18:a2:05:a5:6f:f7:1b:ff:53:
         c5:67:3c:c7:b7:48:52:ef:2e:03:fa:01:63:96:e7:cd:4c:ab:
         bc:b6:cf:91:df:e8:92:36:73:2b:81:a4:77:ff:a3:c1:b3:bd:
         5a:3d:f8:0e:01:f2:f3:b1:e4:b8:7d:ea:16:c7:42:10:9d:c1:
         0e:46:0f:4b:3f:f4:5a:38:87:2e:2d:5e:fc:af:b9:1f:a1:0b:
         d5:5b:e4:87:22:72:3a:44:25:56:66:18:c6:7d:25:32:4d:e9:
         c2:9f:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----