Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.mft
File:                     4CA71A2C584E7F45E94DAB910E5010135085E9D7.mft (raw, json)
Hash identifier:          CglVPIMiiK7FxfJwN3jxBnpVsg0g/OkH+nufZec3C+E=
Subject key identifier:   BA:6A:9D:97:E3:8F:5F:5A:67:0B:B7:BD:71:B2:BF:E1:D1:4E:35:81
Authority key identifier: 4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
Certificate issuer:       /CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Certificate serial:       5918E2C5E5F70F0E06394685D6126FCAA0C33DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.mft
Manifest number:          91
Signing time:             Tue 02 Mar 2021 15:40:00 +0000
Manifest this update:     Tue 02 Mar 2021 15:35:00 +0000
Manifest next update:     Wed 03 Mar 2021 15:40:00 +0000
Files and hashes:         1: 34352e3135322e34372e302f32342d3234203d3e20333238333737.roa (hash: 9idGpzo3o6Z129zkuNYOWO6mJUsA656PYrJKQlH3FvI=)
                          2: 34352e3135322e34372e302f32342d3234203d3e203434363835.roa (hash: kdI7GIjHxuqSKVDZK3p8arXeNZhtMGC82xqS4PPaX+c=)
                          3: 34352e3135322e34352e302f32342d3234203d3e203138343530.roa (hash: eClT8ghC1sFKfvZaS4CXD/dlXMi7nv3uxT5N0u+P00I=)
                          4: 34352e3135322e34362e302f32342d3234203d3e203630353438.roa (hash: KK+zjlEwsi7+wTzXZN3MdXKv5L4MfT/zq+TvfGqNchY=)
                          5: 34352e3135322e34362e302f32332d3234203d3e203631333137.roa (hash: Ar23EOLkbG0kMJ7hxPjyYAuDYd0AdnvMKilx6E+aBTw=)
                          6: 34352e3135322e34342e302f32342d3234203d3e203434363835.roa (hash: 8nk4LLaRdAro9w3SUKFf2W5iSEYZCxTaz/3Z3hFmaB4=)
                          7: 34352e3135322e34352e302f32342d3234203d3e20313334303934.roa (hash: 9wGy+ncd+C76pFCbB7NBe8vhzPt3eMs1daX3iwg4HUg=)
                          8: 4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl (hash: bsc93YtlwyCBLYJy2tRghKNa27d1y5zh2zMEHOC4vrE=)
                          9: 34352e3135322e34342e302f32332d3234203d3e203631333137.roa (hash: vUMDKD8VqFygnNmY28LOS2EzqRkqdQtfM0AAxi49jcU=)
                          10: 34352e3135322e34342e302f32342d3234203d3e20333238333737.roa (hash: lCiQNH0swhButzdO+ZCjzEkOE2nOdfuvMWhw4Auc6cY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:18:e2:c5:e5:f7:0f:0e:06:39:46:85:d6:12:6f:ca:a0:c3:3d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
        Validity
            Not Before: Mar  2 15:35:00 2021 GMT
            Not After : Mar  9 15:40:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:a6:59:e9:52:51:c9:9f:4c:93:96:58:bd:
                    60:57:99:a3:aa:f6:a5:13:f4:8f:44:17:a8:33:ff:
                    f5:b1:cb:a3:53:73:40:ff:d8:74:98:61:b5:04:cf:
                    ee:71:36:7c:6e:17:aa:36:03:45:53:96:f5:bf:22:
                    1a:87:46:75:54:13:64:e2:60:0b:d7:af:ea:44:52:
                    a6:b4:4a:d2:14:be:ab:4e:ee:a7:b2:e4:47:51:23:
                    f4:02:a0:ce:8b:62:18:56:6f:3e:06:b5:39:bb:00:
                    ad:1c:54:b0:0b:11:06:79:ba:23:fa:23:65:98:6b:
                    93:c9:d3:07:53:3d:b8:49:f2:a3:09:04:8c:43:44:
                    af:b8:ce:5f:f6:7b:78:57:ec:30:82:43:e8:b5:75:
                    d6:8d:e0:b6:9e:09:dc:b4:db:f1:8c:58:62:17:27:
                    25:ef:56:0e:67:1a:69:20:c9:8f:37:ae:0e:07:d5:
                    f6:70:f1:f2:87:62:a6:23:19:b0:fc:79:eb:75:01:
                    94:eb:ec:f7:d9:72:0a:a7:49:a0:6c:ac:a2:a4:d6:
                    bc:f6:d1:61:0b:02:1c:10:56:6f:45:c0:9d:39:7f:
                    ff:7b:a7:07:46:4d:a5:19:d1:69:1a:c1:fa:ff:1c:
                    c0:c5:c9:6e:33:20:3d:af:b1:99:41:5b:5c:5d:cd:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6A:9D:97:E3:8F:5F:5A:67:0B:B7:BD:71:B2:BF:E1:D1:4E:35:81
            X509v3 Authority Key Identifier:
                keyid:4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8f:a2:58:0f:f8:ce:00:92:3d:58:77:79:f9:3b:87:b2:56:
         39:45:4c:13:a0:85:9b:a5:8c:d6:b7:97:88:58:6c:81:73:ae:
         3f:7b:05:a3:ca:31:da:f4:89:dd:e4:31:d6:d0:ff:c9:a7:ee:
         0c:ff:37:78:a5:8a:4b:9e:e3:4e:a4:97:3f:8c:93:d6:6f:e7:
         ea:75:2e:3a:c0:54:2b:2e:48:1a:5a:28:45:2b:4e:3e:e7:38:
         cd:e7:36:18:6b:e2:39:90:37:56:1a:a4:a1:58:23:1c:a6:05:
         06:0d:a4:7b:78:41:a0:c5:ba:21:6c:ca:ee:6c:5a:17:33:a5:
         f4:0c:f3:64:6a:6d:d2:cc:e2:4f:a4:5e:a2:78:42:8f:4a:33:
         eb:8a:3d:b4:e6:0d:a6:63:31:08:c4:18:c9:0b:2b:4c:29:72:
         2f:95:ac:72:03:56:be:2a:36:a7:07:b6:87:c2:2c:0f:7f:51:
         0e:85:2c:e3:d4:29:40:e7:b1:51:cf:77:b9:af:7c:5e:8e:af:
         38:dc:6d:10:04:34:3c:6e:12:70:c2:3b:c7:51:f0:63:93:8d:
         6d:9b:05:ee:e6:4a:8d:f2:e6:9d:09:99:e9:80:a9:91:ac:7f:
         7e:9f:9d:e0:74:50:93:1e:38:b6:dc:99:89:f5:be:58:b5:d1:
         ef:48:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----