Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/137/B5EA515D763F618F9A8D9AC5B8D05E4F317B1A4B.mft
File:                     B5EA515D763F618F9A8D9AC5B8D05E4F317B1A4B.mft (raw, json)
Hash identifier:          Sth3XjDIXjUtCLWsrYjKrjg085Uh6sPdSoAS5mzvtVw=
Subject key identifier:   B8:66:11:25:1D:A3:8E:6C:CD:53:15:F0:99:7A:6E:66:FF:11:01:FF
Authority key identifier: B5:EA:51:5D:76:3F:61:8F:9A:8D:9A:C5:B8:D0:5E:4F:31:7B:1A:4B
Certificate issuer:       /CN=b5ea515d763f618f9a8d9ac5b8d05e4f317b1a4b
Certificate serial:       41817E95D49D938ADFA9C751454FA2292013E3C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tepRXXY_YY-ajZrFuNBeTzF7Gks.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/137/B5EA515D763F618F9A8D9AC5B8D05E4F317B1A4B.mft
Manifest number:          8A
Signing time:             Tue 02 Mar 2021 18:02:00 +0000
Manifest this update:     Tue 02 Mar 2021 17:57:00 +0000
Manifest next update:     Wed 03 Mar 2021 18:02:00 +0000
Files and hashes:         1: 34352e3133302e3130362e302f32342d3234203d3e203631333137.roa (hash: 8yX/Oee/GRcUf6RugYc3nRbgEJgkxAe8d0XXIWAwOns=)
                          2: B5EA515D763F618F9A8D9AC5B8D05E4F317B1A4B.crl (hash: 4TjZr7C4KRHevLEMUIOjdD9NjXcDac6mA8IPWxVoBVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:81:7e:95:d4:9d:93:8a:df:a9:c7:51:45:4f:a2:29:20:13:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ea515d763f618f9a8d9ac5b8d05e4f317b1a4b
        Validity
            Not Before: Mar  2 17:57:00 2021 GMT
            Not After : Mar  9 18:02:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:ee:ca:27:08:37:5a:af:c6:11:9a:34:5c:
                    5a:60:6a:6d:de:db:3f:72:31:b5:b9:86:41:b3:a7:
                    29:2c:41:09:67:39:c4:27:5a:91:ad:11:46:be:a8:
                    87:d4:44:bb:3c:4e:b2:bd:e1:69:1a:f2:e2:f4:00:
                    51:8f:89:8b:a6:39:4c:19:f3:c3:dc:c9:7e:8f:30:
                    11:8c:06:be:90:ac:75:ad:38:10:cb:6d:e3:bf:fb:
                    f7:0b:0b:1f:ee:f5:68:ae:b3:ba:94:6e:b4:98:06:
                    db:9b:8e:3e:97:f8:d9:59:5c:6a:a7:1d:58:6a:4c:
                    a5:18:ec:81:3b:dd:59:7e:89:37:06:a4:dc:90:77:
                    b7:61:b8:23:f8:e1:60:9c:cd:f8:84:f0:df:f7:7c:
                    b3:f8:d0:3a:4c:cb:29:33:ff:59:53:4f:8f:ff:d8:
                    d0:10:bf:6d:61:14:80:be:ba:9c:fb:9e:9f:80:2d:
                    c7:bd:94:c4:a3:f3:fc:2b:4c:f2:74:0d:a1:de:ff:
                    76:7c:ca:97:aa:0f:44:13:e5:69:46:7b:f5:99:50:
                    7c:bf:ed:15:64:66:47:e8:47:e0:5b:4e:31:2a:e3:
                    4c:7e:e1:b0:e5:9a:1b:e4:b0:7e:9a:be:01:f8:c0:
                    ae:38:24:6e:ef:af:5a:22:72:10:6b:54:6a:c3:c9:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:66:11:25:1D:A3:8E:6C:CD:53:15:F0:99:7A:6E:66:FF:11:01:FF
            X509v3 Authority Key Identifier:
                keyid:B5:EA:51:5D:76:3F:61:8F:9A:8D:9A:C5:B8:D0:5E:4F:31:7B:1A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/137/B5EA515D763F618F9A8D9AC5B8D05E4F317B1A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tepRXXY_YY-ajZrFuNBeTzF7Gks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/137/B5EA515D763F618F9A8D9AC5B8D05E4F317B1A4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:54:89:a5:a4:70:10:6a:0a:a7:f6:53:da:32:04:6f:d8:b4:
         28:49:3b:30:1f:20:00:df:11:aa:c6:3d:65:8e:6b:18:72:31:
         55:7b:dc:be:af:1a:d5:48:a3:e0:bc:2c:09:b0:74:2c:19:49:
         dc:41:20:6c:e5:cc:29:aa:18:4d:55:5b:81:6b:f4:69:c3:79:
         12:f2:26:88:9e:d3:88:ab:d0:fb:51:8b:d2:3c:03:54:7c:10:
         7a:0b:cb:10:51:74:b9:fb:95:c5:0e:b2:6f:eb:1b:80:08:9e:
         e2:75:a0:c0:5e:10:77:00:5d:5b:c3:29:3d:f8:cd:e4:43:46:
         88:00:66:99:98:dd:d4:84:8e:5c:a3:c0:f4:c1:fe:1e:81:71:
         85:98:6f:f0:f4:3d:48:09:b4:53:87:07:2d:18:5f:82:81:50:
         19:5d:15:95:e3:ad:cf:94:79:29:47:cd:20:67:0b:e3:b8:b2:
         4e:5d:d9:df:cd:16:b4:66:ae:0f:ae:f0:5d:ab:d8:79:ea:f1:
         5e:3e:93:b8:1c:8d:7c:b0:ca:df:2f:f8:23:f9:4f:1b:2b:af:
         21:16:be:04:4b:73:98:8f:1c:d8:32:79:00:d6:3b:58:72:db:
         e1:32:ca:c1:af:3c:2b:eb:47:27:e8:d0:59:42:98:a1:cd:f9:
         5c:09:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----