Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/142/1AE48363BBE00EEFD45178B76BDB9083F5455F33.mft
File:                     1AE48363BBE00EEFD45178B76BDB9083F5455F33.mft (raw, json)
Hash identifier:          X1ExXp+zRbJcjqskxaY5p5akmeqa4mQZk56FR6fOEpk=
Subject key identifier:   45:C7:24:03:8C:76:7E:94:FA:8B:06:5B:0E:D8:FE:B6:EC:24:0C:28
Authority key identifier: 1A:E4:83:63:BB:E0:0E:EF:D4:51:78:B7:6B:DB:90:83:F5:45:5F:33
Certificate issuer:       /CN=1ae48363bbe00eefd45178b76bdb9083f5455f33
Certificate serial:       1C79F38FB6ADF4B5E2DC4D4BC4A6CAD9B943AED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuSDY7vgDu_UUXi3a9uQg_VFXzM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/142/1AE48363BBE00EEFD45178B76BDB9083F5455F33.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 14:28:00 +0000
Manifest this update:     Tue 02 Mar 2021 14:23:00 +0000
Manifest next update:     Wed 03 Mar 2021 14:28:00 +0000
Files and hashes:         1: 1AE48363BBE00EEFD45178B76BDB9083F5455F33.crl (hash: 6MNrZ9A74+eOsn0pEwSZqh40sMWcFiGe7WkMoauciu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:79:f3:8f:b6:ad:f4:b5:e2:dc:4d:4b:c4:a6:ca:d9:b9:43:ae:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae48363bbe00eefd45178b76bdb9083f5455f33
        Validity
            Not Before: Mar  2 14:23:00 2021 GMT
            Not After : Mar  9 14:28:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:74:b3:81:61:0e:c6:25:22:02:68:b4:68:
                    ed:0d:c2:f8:20:dd:9f:5e:a9:f7:d6:e7:48:d5:22:
                    80:61:b9:1a:6d:4a:b2:90:d7:5b:61:cb:e9:85:aa:
                    c9:65:41:b6:ea:6d:e1:af:4f:df:38:b1:9d:a9:5e:
                    ff:15:c9:91:c0:81:5e:fe:a2:7b:f0:2b:65:b4:a6:
                    62:d2:c8:3c:31:22:56:a6:cc:d1:0c:1e:b1:80:a0:
                    36:79:29:df:98:6b:4a:1f:40:19:8b:aa:6b:e1:72:
                    32:51:c8:01:aa:cc:db:78:60:59:b1:81:c4:18:ed:
                    2e:a7:0f:77:fb:36:60:7a:c7:48:ce:c2:5c:94:96:
                    96:dd:4f:4e:5d:15:93:08:02:c7:41:d6:a5:03:33:
                    87:0d:a0:33:45:68:ac:46:f2:c9:eb:de:a3:a7:f1:
                    12:ad:56:1f:77:66:cc:6c:0a:3a:05:24:35:c7:80:
                    44:43:94:9a:9c:55:20:8e:14:e8:26:e3:9e:53:08:
                    f6:8b:66:48:b7:4f:a3:e0:3c:a8:9c:11:7b:73:88:
                    f0:23:af:b8:ec:17:e5:e7:81:f0:69:ec:4c:bf:2d:
                    a1:5c:84:95:b0:43:ec:f3:a7:3f:83:f4:73:72:d0:
                    bd:c3:62:10:32:86:b9:52:5f:67:7d:4d:40:76:f1:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C7:24:03:8C:76:7E:94:FA:8B:06:5B:0E:D8:FE:B6:EC:24:0C:28
            X509v3 Authority Key Identifier:
                keyid:1A:E4:83:63:BB:E0:0E:EF:D4:51:78:B7:6B:DB:90:83:F5:45:5F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/142/1AE48363BBE00EEFD45178B76BDB9083F5455F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuSDY7vgDu_UUXi3a9uQg_VFXzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/142/1AE48363BBE00EEFD45178B76BDB9083F5455F33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2e:93:65:ed:60:65:50:54:2d:d9:70:f0:f3:b6:d2:82:63:
         52:c1:28:13:f8:25:fc:f9:de:17:22:fa:8d:bc:1e:ed:2c:4d:
         ec:cc:74:ca:44:27:fd:3e:f9:09:18:fc:40:ac:c7:2c:7e:4f:
         4d:94:61:79:7e:70:f1:3e:d8:ae:ca:b2:3f:ba:54:82:c7:71:
         8a:47:6c:a5:dd:03:2b:60:03:e0:0b:2b:ef:cd:14:a2:f2:c8:
         11:c7:27:26:6e:82:db:59:02:4f:0d:57:a8:26:71:9d:58:87:
         87:85:0c:68:f1:ee:02:b9:da:f1:f4:9b:c9:8c:7c:c3:02:0e:
         55:e0:ad:73:43:60:c1:71:4b:e8:87:97:29:e5:9f:72:63:eb:
         98:a1:ef:08:59:d6:72:f1:db:2b:50:4d:b2:81:4c:dc:bb:4f:
         a3:6d:6f:ba:ec:c0:1f:cd:46:02:49:89:27:95:ed:4f:3d:bf:
         70:bf:2e:6c:1c:89:fb:b5:7e:88:73:4b:01:b6:b6:52:bb:be:
         af:f3:df:75:43:4c:3f:7d:77:7b:16:c1:20:2c:e4:ac:86:96:
         af:3a:b0:5f:3a:4c:4f:7f:72:84:03:f5:8a:f7:35:4b:bf:4a:
         05:a7:f3:c7:92:5b:7f:68:17:f4:ad:a0:21:1b:9f:cf:3e:9f:
         41:e1:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----