Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.mft
File:                     4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.mft (raw, json)
Hash identifier:          kuuJvSSBKkl/npWYi2VhNni+QAV8FsW6+yPI5gX0ldA=
Subject key identifier:   20:E3:EA:33:52:F2:7A:84:4A:CA:20:61:26:3F:CA:60:40:22:0D:CD
Authority key identifier: 4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
Certificate issuer:       /CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Certificate serial:       31EC40F0CEA389DA38F6EFA3250FAC7E007B7211
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.mft
Manifest number:          95
Signing time:             Tue 02 Mar 2021 20:02:00 +0000
Manifest this update:     Tue 02 Mar 2021 19:57:00 +0000
Manifest next update:     Wed 03 Mar 2021 20:02:00 +0000
Files and hashes:         1: 34352e31342e39302e302f32342d3234203d3e20323131383331.roa (hash: sw0hdAmYL+8huE5vBl4/LBRn1wkhDZwM7CE3BXrLqSg=)
                          2: 34352e31342e38392e302f32342d3234203d3e203235303938.roa (hash: /Q63jt4KbOZ3Is8MUr0jML+zmpBYuBhU4gm7GuY4IPE=)
                          3: 34352e31342e39312e302f32342d3234203d3e20333238333737.roa (hash: lSCbSyj7TGstiKULtu+ksNY32B4FIC8CTKrnXvepahc=)
                          4: 4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.crl (hash: Xd12nIkaxav8AJnwpxeMNbdSPsXW9YjHYUg1zSI5WvQ=)
                          5: 34352e31342e38382e302f32342d3234203d3e203235303938.roa (hash: 4kL0994hReX0bIHHjZdR9/lKq2RSuqAzj1c+0SY54A4=)
                          6: 34352e31342e39312e302f32342d3234203d3e203434363835.roa (hash: +kmnN65cCiCsrccbYGHkXDPYgTWyP7xx+AVZNP99sFc=)
                          7: 34352e31342e39302e302f32332d3234203d3e203631333137.roa (hash: xipRZ6ABvMtO4Au7NQGOz6y0uedw4Enm7J6bjv9cqls=)
                          8: 34352e31342e38382e302f32332d3234203d3e203631333137.roa (hash: ASxmooLMKIjKDlKi4OaQ4TH26f4SCmVH9rN+GVVwsMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ec:40:f0:ce:a3:89:da:38:f6:ef:a3:25:0f:ac:7e:00:7b:72:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
        Validity
            Not Before: Mar  2 19:57:00 2021 GMT
            Not After : Mar  9 20:02:00 2021 GMT
        Subject: CN=3082010A0282010100BE820111BAA7F8D854BC20C0D59BD48F777B59BCFE303A44558283F17D901D94A29411EF561D962616AAA0F4B016ED6C9116C4A6C0BDD91030D8415FC5D71BF2A1E5DF304F154F0DDE4C1F843FD1BD4713DF15F62F4AF844D5A2383FE8016EAD27BC985D19E41B6837B80194F3773C8DBADBFCB2A7318F5CAEF192DA7A1C23BFB760178DD1AD55E4EB9E8C24A7E3F3E9524A397CEB477B96B751DE87C7F35482F921164B39F00BFDBB7CA9A8C65DADCC210F70BA28F83E6F90CB112A3F789170C9AF2AB7C57A35E78B2E339DD8BE0A1D3A7DB968E99F2EC95364600C3494B36057ACC6E1575FE2556E2DA7E5A31B18D32F3F9E886D42B958E6A2B7CC066C0C970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:01:11:ba:a7:f8:d8:54:bc:20:c0:d5:9b:
                    d4:8f:77:7b:59:bc:fe:30:3a:44:55:82:83:f1:7d:
                    90:1d:94:a2:94:11:ef:56:1d:96:26:16:aa:a0:f4:
                    b0:16:ed:6c:91:16:c4:a6:c0:bd:d9:10:30:d8:41:
                    5f:c5:d7:1b:f2:a1:e5:df:30:4f:15:4f:0d:de:4c:
                    1f:84:3f:d1:bd:47:13:df:15:f6:2f:4a:f8:44:d5:
                    a2:38:3f:e8:01:6e:ad:27:bc:98:5d:19:e4:1b:68:
                    37:b8:01:94:f3:77:3c:8d:ba:db:fc:b2:a7:31:8f:
                    5c:ae:f1:92:da:7a:1c:23:bf:b7:60:17:8d:d1:ad:
                    55:e4:eb:9e:8c:24:a7:e3:f3:e9:52:4a:39:7c:eb:
                    47:7b:96:b7:51:de:87:c7:f3:54:82:f9:21:16:4b:
                    39:f0:0b:fd:bb:7c:a9:a8:c6:5d:ad:cc:21:0f:70:
                    ba:28:f8:3e:6f:90:cb:11:2a:3f:78:91:70:c9:af:
                    2a:b7:c5:7a:35:e7:8b:2e:33:9d:d8:be:0a:1d:3a:
                    7d:b9:68:e9:9f:2e:c9:53:64:60:0c:34:94:b3:60:
                    57:ac:c6:e1:57:5f:e2:55:6e:2d:a7:e5:a3:1b:18:
                    d3:2f:3f:9e:88:6d:42:b9:58:e6:a2:b7:cc:06:6c:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E3:EA:33:52:F2:7A:84:4A:CA:20:61:26:3F:CA:60:40:22:0D:CD
            X509v3 Authority Key Identifier:
                keyid:4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:04:5e:6d:d9:8f:43:fd:b2:15:2d:6a:bc:8b:bb:33:39:80:
         9e:bd:99:3f:c6:ff:84:82:c7:43:f3:74:bb:81:05:a1:e7:dc:
         b3:d1:1a:1f:09:9f:7b:b2:1a:08:35:23:22:90:17:d3:a4:f2:
         7c:6a:a7:af:e6:2f:b1:6b:ed:26:bb:04:ad:db:d5:7f:53:00:
         28:7a:57:08:c1:f6:52:08:89:82:12:52:cf:4b:7a:d3:d0:f7:
         de:60:de:5f:d0:32:3f:8b:71:ef:fc:14:7b:32:ba:fe:b6:8e:
         d0:9e:57:e7:d9:d4:92:1d:2b:ce:66:28:53:06:52:a1:c8:94:
         d1:ed:c2:cb:5c:b5:9d:b1:aa:b5:85:7d:71:15:6a:f1:8d:c7:
         d2:c6:0f:48:58:46:8d:d5:15:c4:ce:27:cd:d1:0b:9b:5e:a9:
         6f:ee:28:4e:0c:e3:a1:d9:40:bd:11:cc:3c:8b:9b:14:10:fd:
         c5:09:25:d0:86:85:8d:48:5a:5b:8b:3c:89:45:39:75:1e:9f:
         72:bf:c0:19:fd:b0:8b:88:8d:38:48:3f:f0:a2:a0:48:6b:f5:
         b0:d5:18:14:d8:e6:60:c7:38:6e:76:6c:37:99:ea:de:d6:7a:
         1c:74:cb:60:48:b3:16:89:6d:77:b2:42:84:ff:70:a7:2a:17:
         ac:de:1b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----