Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/134/1D6594BA0EBB73B4327F3AFDF64B0AC06CF4F592.mft
File:                     1D6594BA0EBB73B4327F3AFDF64B0AC06CF4F592.mft (raw, json)
Hash identifier:          JE10eaAg8/VESw5XYkz5GMpWMkTHVzT8IvtyhVS4h/4=
Subject key identifier:   0B:84:D0:18:59:9F:CF:AC:49:E6:BC:3A:E1:1C:10:5B:8D:04:87:61
Authority key identifier: 1D:65:94:BA:0E:BB:73:B4:32:7F:3A:FD:F6:4B:0A:C0:6C:F4:F5:92
Certificate issuer:       /CN=1d6594ba0ebb73b4327f3afdf64b0ac06cf4f592
Certificate serial:       5EAD0D92AC62636701CDE719032BFBF0CF3B6B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWWUug67c7Qyfzr99ksKwGz09ZI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/134/1D6594BA0EBB73B4327F3AFDF64B0AC06CF4F592.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 15:12:00 +0000
Manifest this update:     Tue 02 Mar 2021 15:07:00 +0000
Manifest next update:     Wed 03 Mar 2021 15:12:00 +0000
Files and hashes:         1: 1D6594BA0EBB73B4327F3AFDF64B0AC06CF4F592.crl (hash: 4zoCyQvK6hVLlWEobQ5oD2D4aQHzh/jkH4clDzvQKJw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ad:0d:92:ac:62:63:67:01:cd:e7:19:03:2b:fb:f0:cf:3b:6b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6594ba0ebb73b4327f3afdf64b0ac06cf4f592
        Validity
            Not Before: Mar  2 15:07:00 2021 GMT
            Not After : Mar  9 15:12:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:e6:02:cc:2d:63:e7:d3:50:2f:b3:ed:09:
                    bb:ed:81:8a:d4:da:bb:8c:d8:3a:ab:75:af:fa:14:
                    ec:3f:53:78:0f:42:0d:5c:ce:42:2d:a6:5b:89:90:
                    24:58:6e:3f:f7:ca:fd:d6:a8:99:9f:b2:98:c5:7e:
                    45:e1:6c:01:3a:d7:20:3d:f4:8f:86:37:06:1d:a3:
                    8c:96:5a:2e:79:6a:37:8e:af:1b:dc:4f:66:5e:bf:
                    12:9b:16:86:12:53:cd:f7:b2:b3:5a:81:df:56:f2:
                    0d:2a:26:33:ba:51:e6:81:ef:a7:65:ad:af:12:af:
                    26:a8:02:47:82:c6:c4:dd:3b:2d:26:bc:39:5f:07:
                    56:4c:cc:d8:b3:51:2f:02:ca:3b:9d:bd:79:ea:58:
                    56:39:f8:84:c9:7d:ac:0b:94:ff:92:4f:61:72:53:
                    5b:79:ed:34:5d:7c:ed:fb:4d:7e:00:08:55:d8:cc:
                    b1:95:e6:23:2c:80:0f:bc:5c:bb:ec:0d:09:bd:b4:
                    d2:4a:24:36:1f:1a:39:28:a9:ca:15:80:c9:f7:9d:
                    b5:f7:d9:0c:09:9e:1a:ac:62:32:f7:83:af:78:01:
                    db:32:02:6d:4f:cc:f7:ec:53:cd:71:a9:fd:e0:91:
                    45:4f:04:53:a7:f1:bd:9f:4b:fb:a1:3c:82:b5:1d:
                    a2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:D0:18:59:9F:CF:AC:49:E6:BC:3A:E1:1C:10:5B:8D:04:87:61
            X509v3 Authority Key Identifier:
                keyid:1D:65:94:BA:0E:BB:73:B4:32:7F:3A:FD:F6:4B:0A:C0:6C:F4:F5:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/134/1D6594BA0EBB73B4327F3AFDF64B0AC06CF4F592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWWUug67c7Qyfzr99ksKwGz09ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/134/1D6594BA0EBB73B4327F3AFDF64B0AC06CF4F592.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7c:81:fa:74:c1:e6:c4:dd:5d:bb:79:13:34:69:74:15:d1:
         2b:60:4d:2f:82:e1:2a:89:44:69:1b:ad:80:0a:0d:35:01:64:
         0e:9a:7f:73:df:78:30:e3:0d:05:79:bc:9e:3a:ff:14:04:fe:
         dc:63:ff:fe:e4:25:c0:e8:84:81:6a:ff:61:89:04:97:33:85:
         39:32:2a:93:f0:be:71:ac:c7:3a:56:42:58:7a:cb:5c:cb:29:
         08:29:60:ca:c8:8e:fa:fe:f4:9f:d2:41:3b:4f:4a:dc:41:33:
         fa:2a:5f:b6:23:08:cc:b4:84:48:36:b4:f9:79:7e:c9:f2:98:
         57:1a:04:04:86:98:52:e6:13:cc:17:63:e2:3e:94:68:15:10:
         35:7e:6e:e8:00:92:7c:25:02:22:fd:0e:af:a1:c5:6f:60:ac:
         00:22:18:de:24:69:28:71:3a:fb:8e:e1:e3:7c:a3:0c:bd:f0:
         c5:c2:5e:8c:9f:99:3e:f8:2c:02:e5:fa:45:dc:69:03:4e:4b:
         d5:fe:b5:f8:8e:b4:ab:f3:6e:3d:ae:64:32:28:bd:6c:fa:ac:
         a1:dc:24:0e:0d:1f:72:56:5e:b0:df:da:ce:26:9a:10:e2:56:
         0f:97:7c:7d:93:96:b7:db:7e:29:81:3c:c2:5c:73:ef:57:96:
         3c:af:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----