Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/124/4FA89DB3EDE486CBF7C9E27FEB21B861326E7D04.mft
File:                     4FA89DB3EDE486CBF7C9E27FEB21B861326E7D04.mft (raw, json)
Hash identifier:          NvoV+Xncxzgj0AjPK+YhoUArOST3lFlbYr9ef0uYfrw=
Subject key identifier:   7C:B7:4F:E2:E9:1B:A6:75:6E:F2:CF:B5:BC:66:A3:10:13:33:E2:98
Authority key identifier: 4F:A8:9D:B3:ED:E4:86:CB:F7:C9:E2:7F:EB:21:B8:61:32:6E:7D:04
Certificate issuer:       /CN=4fa89db3ede486cbf7c9e27feb21b861326e7d04
Certificate serial:       7552F115D97468E1F069A29E5CD623EC0F0F798A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T6ids-3khsv3yeJ_6yG4YTJufQQ.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/124/4FA89DB3EDE486CBF7C9E27FEB21B861326E7D04.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 13:44:00 +0000
Manifest this update:     Tue 02 Mar 2021 13:39:00 +0000
Manifest next update:     Wed 03 Mar 2021 13:44:00 +0000
Files and hashes:         1: 4FA89DB3EDE486CBF7C9E27FEB21B861326E7D04.crl (hash: 9r6TjY7cPd/JZTiJ4dG1zHBr9sCqdvQpH5e+pSFCZJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:52:f1:15:d9:74:68:e1:f0:69:a2:9e:5c:d6:23:ec:0f:0f:79:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fa89db3ede486cbf7c9e27feb21b861326e7d04
        Validity
            Not Before: Mar  2 13:39:00 2021 GMT
            Not After : Mar  9 13:44:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:0a:a6:7e:e2:ae:00:e9:16:50:15:ae:d9:
                    3d:36:bd:57:31:b3:b2:ce:4b:6c:25:b3:9b:95:85:
                    5a:23:03:99:af:99:25:17:68:81:84:79:12:06:1c:
                    0a:81:3f:15:6f:de:0e:84:1b:df:c8:fb:0f:ab:98:
                    09:27:18:f8:23:62:65:6f:26:88:88:ad:9f:73:49:
                    53:09:bb:a4:ef:2c:1b:51:79:e4:68:5d:29:ac:d8:
                    ba:5a:ca:8f:f5:ae:c7:b7:c9:44:99:1c:8b:f0:58:
                    09:1e:67:f2:7e:7e:e8:26:ee:12:ba:80:07:09:c6:
                    54:13:39:87:5e:9f:6e:f8:66:a2:19:15:47:be:5c:
                    8d:60:79:58:85:7e:2b:b1:c5:7f:6f:45:98:cd:98:
                    d8:3f:9f:5c:9b:8b:1e:7f:72:10:61:0c:45:8c:a4:
                    9d:60:86:1f:0a:ac:a2:54:51:97:45:eb:51:f2:0f:
                    8a:ac:68:66:f7:ad:a2:64:e9:c1:7c:48:21:52:d3:
                    96:28:9e:c8:22:bc:63:07:0d:0e:01:9d:09:7e:5b:
                    d2:d9:5b:df:67:37:c8:40:dd:f0:75:d7:1c:2e:4f:
                    d8:72:7d:12:9a:c6:79:c3:9a:37:cc:fe:61:0b:e4:
                    9b:0b:cc:fe:75:7f:2d:99:a4:9c:17:78:7c:fc:61:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B7:4F:E2:E9:1B:A6:75:6E:F2:CF:B5:BC:66:A3:10:13:33:E2:98
            X509v3 Authority Key Identifier:
                keyid:4F:A8:9D:B3:ED:E4:86:CB:F7:C9:E2:7F:EB:21:B8:61:32:6E:7D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/124/4FA89DB3EDE486CBF7C9E27FEB21B861326E7D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6ids-3khsv3yeJ_6yG4YTJufQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/124/4FA89DB3EDE486CBF7C9E27FEB21B861326E7D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3d:f7:d6:95:3b:f4:40:7a:94:cc:c8:39:b1:7d:15:68:dc:
         ea:96:5d:ea:fe:5f:8b:10:5a:54:df:5f:1f:07:1c:b2:a7:69:
         23:33:7d:6b:c1:35:44:a1:05:5b:3d:ff:fd:ac:4d:f8:94:84:
         f2:32:d5:70:15:6b:7f:80:ff:07:d9:98:9f:38:09:c1:39:ef:
         1a:c9:e4:0e:4e:2e:2a:14:dc:a0:f2:f4:80:3e:9f:fc:37:b4:
         20:87:ad:41:fa:52:8b:a1:40:6a:79:07:6e:40:dc:26:d0:cd:
         a2:d1:53:17:b4:52:1c:3b:28:a9:1c:f7:15:13:b1:23:77:70:
         e1:b0:84:c9:34:56:8f:5b:02:f4:ea:9e:e9:08:7c:ba:ea:2b:
         1c:75:fe:3a:a7:2d:d6:be:5d:d0:38:00:12:0e:e8:93:fd:7c:
         61:3c:36:58:9b:84:39:89:cc:01:66:03:eb:8c:f0:eb:8f:c7:
         1c:b3:3d:32:a3:ec:3a:31:f6:53:2e:20:58:07:bd:bd:13:4d:
         21:39:76:83:37:68:81:41:58:73:d1:41:48:7c:70:4c:a2:74:
         93:7f:5f:a2:84:27:90:40:84:e6:aa:a3:6d:9d:e1:bd:76:d0:
         ec:a6:fb:21:79:c6:82:af:f8:34:26:00:cc:8e:c9:06:f1:cf:
         78:f9:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----