Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/133/C78D14202870448E8DB1CBC7B5DEB5CF79208CB9.mft
File:                     C78D14202870448E8DB1CBC7B5DEB5CF79208CB9.mft (raw, json)
Hash identifier:          jVo8QhsueKMoxvyxD/y1k1cQHSXqMoczaACI3hr97Ko=
Subject key identifier:   01:8D:51:C8:E2:CA:81:F4:7C:E4:41:F0:09:E3:90:CA:C2:68:92:79
Authority key identifier: C7:8D:14:20:28:70:44:8E:8D:B1:CB:C7:B5:DE:B5:CF:79:20:8C:B9
Certificate issuer:       /CN=c78d14202870448e8db1cbc7b5deb5cf79208cb9
Certificate serial:       17B632538B7E49015759D61C6CE8FA2871A8B298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x40UIChwRI6NscvHtd61z3kgjLk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/133/C78D14202870448E8DB1CBC7B5DEB5CF79208CB9.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 13:44:00 +0000
Manifest this update:     Tue 02 Mar 2021 13:39:00 +0000
Manifest next update:     Wed 03 Mar 2021 13:44:00 +0000
Files and hashes:         1: C78D14202870448E8DB1CBC7B5DEB5CF79208CB9.crl (hash: 7emD/sHrZLyS3kW7SQYHPZMsYF1mq0oEcujPCEokPWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b6:32:53:8b:7e:49:01:57:59:d6:1c:6c:e8:fa:28:71:a8:b2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c78d14202870448e8db1cbc7b5deb5cf79208cb9
        Validity
            Not Before: Mar  2 13:39:00 2021 GMT
            Not After : Mar  9 13:44:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fb:9a:06:2b:72:e5:4e:bb:41:15:bc:b8:22:
                    26:5b:b8:82:d5:3d:89:34:25:3d:50:c0:32:9c:f9:
                    30:0a:7f:66:1e:c9:d0:92:9d:7a:82:eb:50:ad:bb:
                    d4:f2:10:db:34:cb:90:56:d5:51:52:ae:88:16:5e:
                    16:6a:af:ca:01:e6:21:58:df:f0:0d:04:b6:8e:89:
                    cf:67:7b:32:40:4a:33:bb:19:25:a1:51:03:f4:46:
                    c2:0a:72:43:93:87:a2:d6:a9:21:7f:30:ea:63:1e:
                    ab:56:e1:c5:61:06:7e:78:b9:57:05:5e:4d:2b:33:
                    b8:43:3f:7b:95:61:9b:8b:01:5d:fa:bd:d7:0d:05:
                    04:5b:fc:f5:95:b5:ad:8a:c8:0f:c5:5a:81:78:2d:
                    82:f5:ef:6b:4a:5c:b4:b2:bb:4e:fe:c6:73:6a:90:
                    c8:1b:59:b0:06:6a:ed:64:b6:f4:73:58:60:7c:72:
                    1e:6a:87:25:c7:a7:ae:40:24:5b:b3:b7:17:00:d6:
                    2f:ce:e8:f9:eb:bf:c3:ed:57:4c:2c:a6:dd:a9:d5:
                    d2:6c:60:08:40:58:28:f1:87:81:65:10:59:8e:49:
                    13:1c:2d:46:b7:94:7a:eb:2f:fb:10:07:49:4c:bd:
                    bd:dc:6a:32:bc:f8:c0:d2:7f:fe:20:34:14:ba:5b:
                    e5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8D:51:C8:E2:CA:81:F4:7C:E4:41:F0:09:E3:90:CA:C2:68:92:79
            X509v3 Authority Key Identifier:
                keyid:C7:8D:14:20:28:70:44:8E:8D:B1:CB:C7:B5:DE:B5:CF:79:20:8C:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/133/C78D14202870448E8DB1CBC7B5DEB5CF79208CB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x40UIChwRI6NscvHtd61z3kgjLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/133/C78D14202870448E8DB1CBC7B5DEB5CF79208CB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f3:b8:16:eb:2c:1c:f6:16:6a:84:cd:e9:c5:38:2a:d4:8d:
         79:d1:83:75:c3:dd:a1:9c:ca:bb:b3:80:15:14:6d:2c:fd:03:
         a9:65:61:d5:2c:f1:aa:27:68:0a:33:e3:7d:bd:be:d5:c4:43:
         14:75:27:f4:6f:73:0e:a2:01:9f:35:e0:4e:3c:9d:8f:78:b8:
         e8:ab:e9:83:59:19:c5:1e:e2:62:ed:01:5b:4d:8a:78:b7:53:
         e9:de:36:e4:55:9b:e0:5c:6e:fe:88:d1:11:78:59:0b:0a:52:
         07:e3:d6:e2:ba:31:eb:10:17:e6:68:8c:94:d6:11:ea:d1:d3:
         8c:78:86:9b:39:27:42:a1:4d:2e:d6:17:27:49:be:e5:f4:a6:
         70:1c:83:33:24:a5:a4:0c:e0:b4:2b:9b:bc:62:33:c7:79:5a:
         6e:6b:9e:1b:f1:be:1a:26:08:cd:ab:9a:d4:71:38:3a:c8:46:
         5e:23:51:ad:a0:1b:a0:90:2d:92:e0:f7:2d:e7:49:ef:90:47:
         48:6a:52:90:d5:01:d1:fa:36:48:09:9c:cd:1f:a2:76:6a:eb:
         54:c0:4a:46:ee:54:5c:1c:d4:80:d8:1a:f7:5e:ee:0b:25:a1:
         9c:23:c5:13:7d:6e:88:9a:ba:fe:eb:db:7f:e8:fd:5e:ab:d0:
         8d:30:bf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----