Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/129/049D685B1DC58199893B48B61795FFC0EB3F983F.mft
File:                     049D685B1DC58199893B48B61795FFC0EB3F983F.mft (raw, json)
Hash identifier:          9ziya7feliuGgURsz12P0fLHePKfn8b+9eq3DenTCt4=
Subject key identifier:   57:52:8D:83:A4:CC:5D:AB:84:35:5F:C1:BA:5D:FA:58:B1:AE:0B:DE
Authority key identifier: 04:9D:68:5B:1D:C5:81:99:89:3B:48:B6:17:95:FF:C0:EB:3F:98:3F
Certificate issuer:       /CN=049d685b1dc58199893b48b61795ffc0eb3f983f
Certificate serial:       653FEC0AECF9E07EEA80F9615176385C50D1AD0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJ1oWx3FgZmJO0i2F5X_wOs_mD8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/129/049D685B1DC58199893B48B61795FFC0EB3F983F.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 15:06:00 +0000
Manifest this update:     Tue 02 Mar 2021 15:01:00 +0000
Manifest next update:     Wed 03 Mar 2021 15:06:00 +0000
Files and hashes:         1: 049D685B1DC58199893B48B61795FFC0EB3F983F.crl (hash: sTiWmh5zPdhgSPWK/ZXrslAQYhZ14m5u0q5OmttSyn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3f:ec:0a:ec:f9:e0:7e:ea:80:f9:61:51:76:38:5c:50:d1:ad:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049d685b1dc58199893b48b61795ffc0eb3f983f
        Validity
            Not Before: Mar  2 15:01:00 2021 GMT
            Not After : Mar  9 15:06:00 2021 GMT
        Subject: CN=3082010A0282010100CC62FDF1003BCEA63BAD844FABE9EF6F0D27BF28F42D7CF62D86F48FCDCCD11A47E8C3B2A32EC5AC188E5ED6F9B264E29AF0E081971F5DA1CA9F6E9CAB4EB78E05C699D84DBD5082F7E22DDD0AC499407E77812951CC61017D92528AEBC11690C4AA825A497638A5701F51B0CEF46A8B612EEEADA8432715BB206EECB918E8F9B38C2822C1A81AFB6F34CF8A4F8001D15C1EFD50841E1417C388FF888E95DD81D6DFACC840FE77F3A7C9E91FAB2A93D2964CD3174E14D717825326371220C2B9928FD35B0926FCE890932B9C5E0D247ECCD445060503B42613DF24EE1D81E8C79917CCCE5AC011AAC25DE15AB9B5FE0A36AE29DEDA4DBD496BCEC890A2BD615D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:fd:f1:00:3b:ce:a6:3b:ad:84:4f:ab:e9:
                    ef:6f:0d:27:bf:28:f4:2d:7c:f6:2d:86:f4:8f:cd:
                    cc:d1:1a:47:e8:c3:b2:a3:2e:c5:ac:18:8e:5e:d6:
                    f9:b2:64:e2:9a:f0:e0:81:97:1f:5d:a1:ca:9f:6e:
                    9c:ab:4e:b7:8e:05:c6:99:d8:4d:bd:50:82:f7:e2:
                    2d:dd:0a:c4:99:40:7e:77:81:29:51:cc:61:01:7d:
                    92:52:8a:eb:c1:16:90:c4:aa:82:5a:49:76:38:a5:
                    70:1f:51:b0:ce:f4:6a:8b:61:2e:ee:ad:a8:43:27:
                    15:bb:20:6e:ec:b9:18:e8:f9:b3:8c:28:22:c1:a8:
                    1a:fb:6f:34:cf:8a:4f:80:01:d1:5c:1e:fd:50:84:
                    1e:14:17:c3:88:ff:88:8e:95:dd:81:d6:df:ac:c8:
                    40:fe:77:f3:a7:c9:e9:1f:ab:2a:93:d2:96:4c:d3:
                    17:4e:14:d7:17:82:53:26:37:12:20:c2:b9:92:8f:
                    d3:5b:09:26:fc:e8:90:93:2b:9c:5e:0d:24:7e:cc:
                    d4:45:06:05:03:b4:26:13:df:24:ee:1d:81:e8:c7:
                    99:17:cc:ce:5a:c0:11:aa:c2:5d:e1:5a:b9:b5:fe:
                    0a:36:ae:29:de:da:4d:bd:49:6b:ce:c8:90:a2:bd:
                    61:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:52:8D:83:A4:CC:5D:AB:84:35:5F:C1:BA:5D:FA:58:B1:AE:0B:DE
            X509v3 Authority Key Identifier:
                keyid:04:9D:68:5B:1D:C5:81:99:89:3B:48:B6:17:95:FF:C0:EB:3F:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/129/049D685B1DC58199893B48B61795FFC0EB3F983F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1oWx3FgZmJO0i2F5X_wOs_mD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/129/049D685B1DC58199893B48B61795FFC0EB3F983F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:38:0a:16:f0:5c:6b:2a:de:39:4f:e4:d6:1a:db:a1:88:
         ba:a2:1e:42:7a:65:da:68:49:ef:f1:dd:19:e9:39:15:fb:6f:
         22:56:f1:1a:5f:26:58:75:e2:53:28:f2:9a:b8:4f:b1:a5:48:
         33:09:6e:4d:56:cb:0f:76:53:39:f8:71:cf:e7:6d:2a:7f:68:
         e8:56:2a:bf:98:14:f4:03:cf:c6:03:f3:8a:f9:37:f5:cf:90:
         f6:75:7d:0b:b6:17:57:77:7d:25:c9:69:cb:44:d9:85:66:25:
         da:fa:d6:de:af:0a:fa:89:de:a6:8e:49:59:d2:fe:f5:c3:23:
         27:ad:1a:0d:8d:e8:52:ae:5b:13:7a:56:cb:d7:61:8d:fa:82:
         7c:55:cb:8e:26:68:b5:3e:ca:f8:b3:55:01:dc:3e:e9:b8:1b:
         a5:ad:15:16:4d:49:64:ad:f5:1f:cd:06:ee:8a:f2:5e:b8:fa:
         e2:ef:c4:00:f5:db:c4:e3:04:0c:aa:60:60:69:67:10:3f:db:
         63:02:2b:67:f2:a3:50:65:5d:7a:51:0f:f9:3f:30:7f:26:af:
         d2:37:a0:ec:b1:ee:29:61:97:31:30:70:1b:ac:f9:0a:a9:b4:
         d2:28:49:52:70:61:3c:34:8a:6b:94:da:ab:86:ec:9f:cc:24:
         4c:12:f0:57
-----BEGIN CERTIFICATE-----
MIIG8TCCBdmgAwIBAgIUZT/sCuz54H7qgPlhUXY4XFDRrQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5ZDY4NWIxZGM1ODE5OTg5M2I0OGI2MTc5NWZmYzBl
YjNmOTgzZjAeFw0yMTAzMDIxNTAxMDBaFw0yMTAzMDkxNTA2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0M2MkZERjEwMDNCQ0VBNjNC
QUQ4NDRGQUJFOUVGNkYwRDI3QkYyOEY0MkQ3Q0Y2MkQ4NkY0OEZDRENDRDExQTQ3
RThDM0IyQTMyRUM1QUMxODhFNUVENkY5QjI2NEUyOUFGMEUwODE5NzFGNURBMUNB
OUY2RTlDQUI0RUI3OEUwNUM2OTlEODREQkQ1MDgyRjdFMjJEREQwQUM0OTk0MDdF
Nzc4MTI5NTFDQzYxMDE3RDkyNTI4QUVCQzExNjkwQzRBQTgyNUE0OTc2MzhBNTcw
MUY1MUIwQ0VGNDZBOEI2MTJFRUVBREE4NDMyNzE1QkIyMDZFRUNCOTE4RThGOUIz
OEMyODIyQzFBODFBRkI2RjM0Q0Y4QTRGODAwMUQxNUMxRUZENTA4NDFFMTQxN0Mz
ODhGRjg4OEU5NUREODFENkRGQUNDODQwRkU3N0YzQTdDOUU5MUZBQjJBOTNEMjk2
NENEMzE3NEUxNEQ3MTc4MjUzMjYzNzEyMjBDMkI5OTI4RkQzNUIwOTI2RkNFODkw
OTMyQjlDNUUwRDI0N0VDQ0Q0NDUwNjA1MDNCNDI2MTNERjI0RUUxRDgxRThDNzk5
MTdDQ0NFNUFDMDExQUFDMjVERTE1QUI5QjVGRTBBMzZBRTI5REVEQTREQkQ0OTZC
Q0VDODkwQTJCRDYxNUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzGL98QA7zqY7rYRPq+nvbw0nvyj0LXz2LYb0j83M0RpH6MOyoy7F
rBiOXtb5smTimvDggZcfXaHKn26cq063jgXGmdhNvVCC9+It3QrEmUB+d4EpUcxh
AX2SUorrwRaQxKqCWkl2OKVwH1GwzvRqi2Eu7q2oQycVuyBu7LkY6PmzjCgiwaga
+280z4pPgAHRXB79UIQeFBfDiP+IjpXdgdbfrMhA/nfzp8npH6sqk9KWTNMXThTX
F4JTJjcSIMK5ko/TWwkm/OiQkyucXg0kfszURQYFA7QmE98k7h2B6MeZF8zOWsAR
qsJd4Vq5tf4KNq4p3tpNvUlrzsiQor1hXQIDAQABo4IB/zCCAfswHQYDVR0OBBYE
FFdSjYOkzF2rhDVfwbpd+lixrgveMB8GA1UdIwQYMBaAFASdaFsdxYGZiTtItheV
/8DrP5g/MA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMjkvMDQ5
RDY4NUIxREM1ODE5OTg5M0I0OEI2MTc5NUZGQzBFQjNGOTgzRi5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL0JKMW9XeDNGZ1ptSk8waTJGNVhfd09zX21EOC5jZXIw
fAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMjkvMDQ5RDY4NUIxREM1ODE5
OTg5M0I0OEI2MTc5NUZGQzBFQjNGOTgzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKJzOAoW8FxrKt45
T+TWGtuhiLqiHkJ6ZdpoSe/x3RnpORX7byJW8RpfJlh14lMo8pq4T7GlSDMJbk1W
yw92Uzn4cc/nbSp/aOhWKr+YFPQDz8YD84r5N/XPkPZ1fQu2F1d3fSXJactE2YVm
Jdr61t6vCvqJ3qaOSVnS/vXDIyetGg2N6FKuWxN6VsvXYY36gnxVy44maLU+yviz
VQHcPum4G6WtFRZNSWSt9R/NBu6K8l64+uLvxAD128TjBAyqYGBpZxA/22MCK2fy
o1BlXXpRD/k/MH8mr9I3oOyx7ilhlzEwcBus+QqptNIoSVJwYTw0imuU2quG7J/M
JEwS8Fc=
-----END CERTIFICATE-----