Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/152/ED381F8706FFFF9D799ACBB6B771E9AB323BBFCF.mft
File:                     ED381F8706FFFF9D799ACBB6B771E9AB323BBFCF.mft (raw, json)
Hash identifier:          lr41Qj7X/aaz3P4tSW9MArR2rFuTY6NsJIV0WgkJX94=
Subject key identifier:   EA:AF:FD:A6:15:B9:41:18:41:5C:4B:71:A2:8A:40:CC:4C:9D:59:44
Authority key identifier: ED:38:1F:87:06:FF:FF:9D:79:9A:CB:B6:B7:71:E9:AB:32:3B:BF:CF
Certificate issuer:       /CN=ed381f8706ffff9d799acbb6b771e9ab323bbfcf
Certificate serial:       322F46C22461A7F0C057B7A2FC2D2D157E0453A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Tgfhwb__515msu2t3HpqzI7v88.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/152/ED381F8706FFFF9D799ACBB6B771E9AB323BBFCF.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 15:08:00 +0000
Manifest this update:     Tue 02 Mar 2021 15:03:00 +0000
Manifest next update:     Wed 03 Mar 2021 15:08:00 +0000
Files and hashes:         1: ED381F8706FFFF9D799ACBB6B771E9AB323BBFCF.crl (hash: mgQS1r6j3ixFirFiRLAspE+IZOykOIFE+IQarpQSDSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2f:46:c2:24:61:a7:f0:c0:57:b7:a2:fc:2d:2d:15:7e:04:53:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed381f8706ffff9d799acbb6b771e9ab323bbfcf
        Validity
            Not Before: Mar  2 15:03:00 2021 GMT
            Not After : Mar  9 15:08:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:96:7a:99:67:10:f0:32:a0:86:98:0c:43:
                    e9:6a:b3:ae:c9:f1:c4:f5:32:e9:17:f4:90:a7:c4:
                    b1:8f:5d:4e:e9:ac:fc:82:d6:69:6d:e4:3f:45:e0:
                    28:42:ea:4e:95:6d:04:92:24:5c:79:18:7e:6e:dc:
                    04:ad:da:27:fd:bf:34:b0:af:68:6d:82:42:fd:a1:
                    9f:45:7d:cf:6d:78:2b:f9:4d:ee:9c:be:82:44:7f:
                    fb:44:6d:7f:27:4e:11:fe:7b:42:bc:6d:80:ca:d1:
                    81:d4:bf:df:ae:c3:6a:b0:8e:80:27:11:3a:d1:cf:
                    72:12:a9:f0:4c:a7:bd:6a:0f:de:46:00:e7:5c:39:
                    a2:3e:b3:b4:ca:f4:fe:4f:0b:09:4b:65:c4:87:1c:
                    fc:5d:04:44:57:f4:5d:56:16:5a:d0:e9:15:aa:2a:
                    c9:fa:97:86:70:aa:3c:04:ab:b7:37:81:07:dd:55:
                    dd:98:e4:7b:94:93:92:8e:28:f8:76:10:cf:5c:6b:
                    31:09:98:9c:b5:bd:3c:6b:a6:0d:c3:ba:bc:cc:0a:
                    5f:d3:e6:c9:8d:7f:3c:41:78:1c:36:be:fe:08:ed:
                    5e:6b:d9:d0:f6:11:04:3f:a9:dc:52:4e:8e:35:4a:
                    b4:bf:0c:5c:90:5f:c6:17:10:ef:e6:b3:97:37:2f:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AF:FD:A6:15:B9:41:18:41:5C:4B:71:A2:8A:40:CC:4C:9D:59:44
            X509v3 Authority Key Identifier:
                keyid:ED:38:1F:87:06:FF:FF:9D:79:9A:CB:B6:B7:71:E9:AB:32:3B:BF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/152/ED381F8706FFFF9D799ACBB6B771E9AB323BBFCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Tgfhwb__515msu2t3HpqzI7v88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/152/ED381F8706FFFF9D799ACBB6B771E9AB323BBFCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5c:7f:57:55:6c:3a:3e:8e:31:c9:4b:92:b5:36:6f:19:d8:
         c8:bc:2f:41:a0:9c:78:a2:25:47:db:9d:63:62:50:21:49:41:
         6b:65:12:11:89:f0:c0:fb:c7:7f:a1:c3:cb:df:52:47:e2:1b:
         bb:1d:b8:58:94:29:41:8d:db:5c:ad:42:a9:ac:28:c6:78:29:
         6c:dc:c7:40:ee:4d:d8:ec:8d:fa:47:51:43:e0:cb:fc:4d:b5:
         43:5a:a9:c8:7b:ec:b7:c6:8e:58:3f:09:6e:a5:a9:48:ce:09:
         d7:ed:f1:5c:93:d4:2e:0c:1b:75:92:07:d4:fe:ce:5b:be:c5:
         1d:ec:87:b5:19:ad:c2:58:d6:34:6a:1a:e7:d2:b3:95:72:15:
         8b:2e:e1:77:58:a3:75:47:b8:f3:36:f2:f1:71:bd:cb:7e:31:
         d4:9e:5b:a6:f6:4f:dd:6c:48:09:d2:eb:be:cf:21:a9:9a:5b:
         21:29:f1:58:02:f5:32:fa:e9:a7:2a:c2:e8:a6:a8:26:ae:88:
         43:6c:28:f3:bf:70:05:bc:87:f3:2a:1f:57:a6:ad:00:bf:1f:
         bc:c0:b2:f5:99:e1:90:7c:e2:a0:ea:e9:c5:48:7a:27:c8:15:
         5f:44:b1:8a:e3:46:9c:25:53:36:d5:9f:8b:46:11:c4:1b:bd:
         57:40:25:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----