Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/118/10BFB03842A782FDC8BC017EB0F6D74359FBC297.mft
File:                     10BFB03842A782FDC8BC017EB0F6D74359FBC297.mft (raw, json)
Hash identifier:          Ly5u+OwgFCBcUjwPHBJnyrwpS0OgvQktIaIGRFrEK8A=
Subject key identifier:   DC:3B:19:24:E0:EB:31:81:A6:25:53:8E:51:9D:29:BE:3F:4E:BC:8B
Authority key identifier: 10:BF:B0:38:42:A7:82:FD:C8:BC:01:7E:B0:F6:D7:43:59:FB:C2:97
Certificate issuer:       /CN=10bfb03842a782fdc8bc017eb0f6d74359fbc297
Certificate serial:       09E381930A71D089AF3CDCE9602DB159EF5C46B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EL-wOEKngv3IvAF-sPbXQ1n7wpc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/118/10BFB03842A782FDC8BC017EB0F6D74359FBC297.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 14:50:00 +0000
Manifest this update:     Tue 02 Mar 2021 14:45:00 +0000
Manifest next update:     Wed 03 Mar 2021 14:50:00 +0000
Files and hashes:         1: 10BFB03842A782FDC8BC017EB0F6D74359FBC297.crl (hash: 6Bl4aTn8J5HsHHLaoTvHJ51R4AQn9896+U9iHJAHWv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e3:81:93:0a:71:d0:89:af:3c:dc:e9:60:2d:b1:59:ef:5c:46:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10bfb03842a782fdc8bc017eb0f6d74359fbc297
        Validity
            Not Before: Mar  2 14:45:00 2021 GMT
            Not After : Mar  9 14:50:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:b4:ad:a6:05:63:12:69:e5:18:11:22:df:
                    a3:32:46:33:ed:63:e3:47:1c:0e:b8:99:75:cc:46:
                    5f:54:a9:c9:6a:99:fc:76:03:bd:d5:68:1a:0c:66:
                    4c:e8:fb:29:f3:28:ac:4f:b0:b9:80:9e:30:3c:50:
                    29:7a:be:d9:19:db:6c:af:a0:2e:26:e8:ce:b0:20:
                    6d:6f:70:70:a9:b3:4b:1f:7f:f9:ab:92:1e:0b:19:
                    22:ee:10:00:83:46:08:63:47:9f:2a:4c:3d:cc:26:
                    2f:3e:5f:53:76:f7:15:a9:5a:0c:90:3c:e4:e6:57:
                    f1:e8:23:0d:b8:7e:cc:fb:cb:d5:19:15:a2:40:c9:
                    16:ac:66:21:45:c9:cd:95:5c:1f:bf:98:b5:9a:7e:
                    4c:a4:19:87:fb:be:f0:29:05:17:78:ec:17:00:67:
                    16:1d:cf:c2:d6:db:85:55:f1:1a:b5:02:f1:b7:fd:
                    99:74:f4:b7:d7:05:a0:60:5d:a8:83:25:e7:85:e0:
                    8f:c2:ee:2e:75:d5:7e:cd:f2:e7:09:aa:0d:f9:f6:
                    9a:b8:32:18:02:fc:b3:2b:74:3e:38:1d:27:a5:40:
                    17:36:94:e3:bd:b1:6e:41:7f:54:0e:e6:f9:f8:d9:
                    dc:40:cd:7e:12:80:1d:c7:6e:6d:0d:66:bd:3a:df:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3B:19:24:E0:EB:31:81:A6:25:53:8E:51:9D:29:BE:3F:4E:BC:8B
            X509v3 Authority Key Identifier:
                keyid:10:BF:B0:38:42:A7:82:FD:C8:BC:01:7E:B0:F6:D7:43:59:FB:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/118/10BFB03842A782FDC8BC017EB0F6D74359FBC297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL-wOEKngv3IvAF-sPbXQ1n7wpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/118/10BFB03842A782FDC8BC017EB0F6D74359FBC297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:47:3b:d5:02:8a:d8:c0:a5:aa:58:49:b9:78:cc:78:e0:d7:
         1f:ed:b6:d9:10:21:44:33:0a:82:4f:58:6a:8b:ef:e7:9b:88:
         d0:a1:68:52:0e:c0:a8:ba:27:da:64:d4:1d:99:37:70:04:82:
         7e:92:55:d5:1f:6f:08:05:db:7b:9a:f3:3d:17:28:59:24:ec:
         cc:9e:b6:0f:4b:79:31:e8:02:a1:ca:5c:2e:97:a8:6e:a1:c4:
         5f:99:dd:94:49:46:a0:53:04:14:45:3a:10:e9:41:77:71:d4:
         54:40:b3:70:c5:6c:f3:56:74:bf:a7:3d:9f:3c:1c:2c:49:53:
         e0:01:52:87:eb:ee:a2:49:4e:5b:c5:15:b4:af:32:fb:a2:0b:
         e1:7e:bf:75:bc:63:17:0a:22:34:1d:cc:45:43:70:c8:1c:38:
         fb:79:41:30:4b:b3:fc:13:d9:7f:16:47:2a:79:75:d0:d7:d1:
         67:e8:1e:34:b6:24:cb:00:26:6c:0c:c3:f5:1e:e5:49:04:28:
         11:90:71:3b:d5:6e:95:9a:a1:70:a5:4b:9b:28:8c:29:5c:66:
         08:a4:3c:b8:d2:8b:de:d6:5f:44:b3:a5:a1:eb:48:aa:a5:8f:
         fe:61:72:39:c4:12:a4:84:66:ac:e9:91:7f:f4:ce:09:71:50:
         46:ab:fc:a6
-----BEGIN CERTIFICATE-----
MIIG8TCCBdmgAwIBAgIUCeOBkwpx0ImvPNzpYC2xWe9cRrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBiZmIwMzg0MmE3ODJmZGM4YmMwMTdlYjBmNmQ3NDM1
OWZiYzI5NzAeFw0yMTAzMDIxNDQ1MDBaFw0yMTAzMDkxNDUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUI1QkI0QURBNjA1NjMxMjY5
RTUxODExMjJERkEzMzI0NjMzRUQ2M0UzNDcxQzBFQjg5OTc1Q0M0NjVGNTRBOUM5
NkE5OUZDNzYwM0JERDU2ODFBMEM2NjRDRThGQjI5RjMyOEFDNEZCMEI5ODA5RTMw
M0M1MDI5N0FCRUQ5MTlEQjZDQUZBMDJFMjZFOENFQjAyMDZENkY3MDcwQTlCMzRC
MUY3RkY5QUI5MjFFMEIxOTIyRUUxMDAwODM0NjA4NjM0NzlGMkE0QzNEQ0MyNjJG
M0U1RjUzNzZGNzE1QTk1QTBDOTAzQ0U0RTY1N0YxRTgyMzBEQjg3RUNDRkJDQkQ1
MTkxNUEyNDBDOTE2QUM2NjIxNDVDOUNEOTU1QzFGQkY5OEI1OUE3RTRDQTQxOTg3
RkJCRUYwMjkwNTE3NzhFQzE3MDA2NzE2MURDRkMyRDZEQjg1NTVGMTFBQjUwMkYx
QjdGRDk5NzRGNEI3RDcwNUEwNjA1REE4ODMyNUU3ODVFMDhGQzJFRTJFNzVENTdF
Q0RGMkU3MDlBQTBERjlGNjlBQjgzMjE4MDJGQ0IzMkI3NDNFMzgxRDI3QTU0MDE3
MzY5NEUzQkRCMTZFNDE3RjU0MEVFNkY5RjhEOURDNDBDRDdFMTI4MDFEQzc2RTZE
MEQ2NkJEM0FERkEyOUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq1u0raYFYxJp5RgRIt+jMkYz7WPjRxwOuJl1zEZfVKnJapn8dgO9
1WgaDGZM6Psp8yisT7C5gJ4wPFAper7ZGdtsr6AuJujOsCBtb3BwqbNLH3/5q5Ie
Cxki7hAAg0YIY0efKkw9zCYvPl9TdvcVqVoMkDzk5lfx6CMNuH7M+8vVGRWiQMkW
rGYhRcnNlVwfv5i1mn5MpBmH+77wKQUXeOwXAGcWHc/C1tuFVfEatQLxt/2ZdPS3
1wWgYF2ogyXnheCPwu4uddV+zfLnCaoN+faauDIYAvyzK3Q+OB0npUAXNpTjvbFu
QX9UDub5+NncQM1+EoAdx25tDWa9Ot+inQIDAQABo4IB/zCCAfswHQYDVR0OBBYE
FNw7GSTg6zGBpiVTjlGdKb4/TryLMB8GA1UdIwQYMBaAFBC/sDhCp4L9yLwBfrD2
10NZ+8KXMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMTgvMTBC
RkIwMzg0MkE3ODJGREM4QkMwMTdFQjBGNkQ3NDM1OUZCQzI5Ny5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL0VMLXdPRUtuZ3YzSXZBRi1zUGJYUTFuN3dwYy5jZXIw
fAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMTgvMTBCRkIwMzg0MkE3ODJG
REM4QkMwMTdFQjBGNkQ3NDM1OUZCQzI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF9HO9UCitjApapY
Sbl4zHjg1x/tttkQIUQzCoJPWGqL7+ebiNChaFIOwKi6J9pk1B2ZN3AEgn6SVdUf
bwgF23ua8z0XKFkk7Myetg9LeTHoAqHKXC6XqG6hxF+Z3ZRJRqBTBBRFOhDpQXdx
1FRAs3DFbPNWdL+nPZ88HCxJU+ABUofr7qJJTlvFFbSvMvuiC+F+v3W8YxcKIjQd
zEVDcMgcOPt5QTBLs/wT2X8WRyp5ddDX0WfoHjS2JMsAJmwMw/Ue5UkEKBGQcTvV
bpWaoXClS5sojClcZgikPLjSi97WX0SzpaHrSKqlj/5hcjnEEqSEZqzpkX/0zglx
UEar/KY=
-----END CERTIFICATE-----