Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/163/58929D850C68341E7C7CF8411DCBAB66A8EA09D8.mft
File:                     58929D850C68341E7C7CF8411DCBAB66A8EA09D8.mft (raw, json)
Hash identifier:          ydGO2Pl/P27VIUVWMWJAOqCx787jVGgSx7EhkO/n0Mk=
Subject key identifier:   35:AA:A3:36:18:9E:FB:69:E9:D1:41:C3:DD:17:1D:8D:C4:BA:54:B6
Authority key identifier: 58:92:9D:85:0C:68:34:1E:7C:7C:F8:41:1D:CB:AB:66:A8:EA:09:D8
Certificate issuer:       /CN=58929d850c68341e7c7cf8411dcbab66a8ea09d8
Certificate serial:       61945038C58D6A1597F0173B72DBD221CE6B5370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WJKdhQxoNB58fPhBHcurZqjqCdg.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/163/58929D850C68341E7C7CF8411DCBAB66A8EA09D8.mft
Manifest number:          8D
Signing time:             Tue 02 Mar 2021 23:12:00 +0000
Manifest this update:     Tue 02 Mar 2021 23:07:00 +0000
Manifest next update:     Wed 03 Mar 2021 23:12:00 +0000
Files and hashes:         1: 58929D850C68341E7C7CF8411DCBAB66A8EA09D8.crl (hash: 7QKVr9dHJDRYsSX/x6RrDJdFlrF4gG6w3NgGQ53f5Ag=)
                          2: 3139332e3136302e3131382e302f32332d3234203d3e203631333137.roa (hash: wqm/IWVi9iR18BY9u7OnZj37EbPRiwMmMjvkDkmr9tQ=)
                          3: 3139332e3136302e3131392e302f32342d3234203d3e20323132303536.roa (hash: h0xBK9kqkIv0tA5+4UAPQQMKkSCxoUctomVLY89dwXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:94:50:38:c5:8d:6a:15:97:f0:17:3b:72:db:d2:21:ce:6b:53:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58929d850c68341e7c7cf8411dcbab66a8ea09d8
        Validity
            Not Before: Mar  2 23:07:00 2021 GMT
            Not After : Mar  9 23:12:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:70:41:9a:85:12:08:33:06:25:46:d9:92:
                    02:a8:c9:29:3f:be:d2:ed:3c:b9:20:d8:87:54:a8:
                    02:38:d2:99:cb:e6:ae:38:45:7e:61:b6:41:54:d4:
                    2f:ed:ec:99:eb:d6:e1:53:3e:89:8a:98:4e:9b:5f:
                    3b:00:06:81:41:6d:5f:a5:96:7c:6a:76:4e:b6:d2:
                    e6:2f:44:ad:1d:48:1e:96:93:2b:cb:2c:8d:cd:ac:
                    5f:31:61:8d:2f:0e:5d:6c:00:b9:2c:d1:3d:09:c7:
                    19:63:ac:be:36:15:d1:c1:3c:0c:72:a5:8b:a5:fe:
                    82:0c:3f:a3:28:11:ba:be:5d:37:a5:3f:6c:0f:c5:
                    58:5d:ce:04:e9:71:36:17:92:dd:3a:c7:b9:c9:6c:
                    f8:4a:58:c9:b0:5c:e1:14:81:0c:17:4c:a7:80:b5:
                    33:5e:d9:c6:33:16:6c:07:43:8e:7e:eb:00:ba:7d:
                    e7:fa:14:ee:89:a8:2e:42:28:c4:1f:81:00:92:e3:
                    00:86:1d:fa:08:46:0a:20:a8:3f:d4:0a:5a:c0:42:
                    96:94:f7:b3:aa:5f:04:a1:74:91:d4:88:1d:2e:bc:
                    f5:b1:60:07:2e:0f:d9:c5:bc:bd:2d:5c:dc:5c:00:
                    8f:b3:80:9b:9c:2c:e2:50:f8:37:88:41:f4:ea:23:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:A3:36:18:9E:FB:69:E9:D1:41:C3:DD:17:1D:8D:C4:BA:54:B6
            X509v3 Authority Key Identifier:
                keyid:58:92:9D:85:0C:68:34:1E:7C:7C:F8:41:1D:CB:AB:66:A8:EA:09:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/163/58929D850C68341E7C7CF8411DCBAB66A8EA09D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WJKdhQxoNB58fPhBHcurZqjqCdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/163/58929D850C68341E7C7CF8411DCBAB66A8EA09D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:97:f0:18:39:8f:81:dc:98:79:25:23:c8:8f:e7:83:b0:4a:
         9d:0a:52:82:68:46:79:26:12:85:02:a8:1d:f4:94:8f:d3:8b:
         24:a4:3b:c2:a5:63:5c:a7:1a:8d:27:c5:95:71:41:d3:02:de:
         0d:66:bd:e8:bc:2b:4a:85:ad:83:08:dd:c5:11:ec:3a:51:2f:
         75:14:b0:43:24:27:e6:e8:67:58:cd:41:c0:63:1e:64:97:86:
         26:70:72:52:26:21:8a:15:cc:fe:c1:e2:3c:b1:71:31:b2:6d:
         3a:8c:bf:f7:c2:2d:30:ef:fb:bc:4a:34:a3:28:f3:8b:47:dc:
         b7:75:34:5a:12:f3:e5:d8:4e:11:38:e2:17:2e:83:ec:dd:c3:
         81:0c:e6:40:b6:b2:48:9f:f4:22:83:46:98:46:83:b7:c2:49:
         91:0a:d3:1f:75:de:01:cb:55:92:10:f9:4b:18:a1:d8:c4:5d:
         60:a1:34:2b:4a:3c:cb:b2:0a:73:1d:4a:46:14:78:04:ad:ef:
         30:9b:63:3f:fc:07:91:42:3e:0e:51:da:ad:bf:b6:0e:e8:3d:
         c5:bd:bf:93:12:4f:71:34:dc:4e:a8:6e:9e:90:5c:9d:92:f2:
         d9:d4:1a:d5:46:99:cb:50:2a:26:67:d6:58:5e:a3:cf:79:bc:
         d3:4b:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----