Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/168/1FF28FF447DD89EC808448730EFE6200DED61780.mft
File:                     1FF28FF447DD89EC808448730EFE6200DED61780.mft (raw, json)
Hash identifier:          VxxgKw4zegi1e2HisfWeDh0RWgRQzF4IEDla6E9GkBg=
Subject key identifier:   6C:5A:1C:99:DF:72:A9:5E:9C:A0:A4:C4:C6:67:C0:A3:59:17:EE:1B
Authority key identifier: 1F:F2:8F:F4:47:DD:89:EC:80:84:48:73:0E:FE:62:00:DE:D6:17:80
Certificate issuer:       /CN=1ff28ff447dd89ec808448730efe6200ded61780
Certificate serial:       5D4191216255BE11126BFA8660B8770B84886F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_KP9EfdieyAhEhzDv5iAN7WF4A.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/168/1FF28FF447DD89EC808448730EFE6200DED61780.mft
Manifest number:          88
Signing time:             Tue 02 Mar 2021 20:08:00 +0000
Manifest this update:     Tue 02 Mar 2021 20:03:00 +0000
Manifest next update:     Wed 03 Mar 2021 20:08:00 +0000
Files and hashes:         1: 1FF28FF447DD89EC808448730EFE6200DED61780.crl (hash: U+ishoNvnXYe+7yhrYllYaUxUO43doVmcd/QUnS1JoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:41:91:21:62:55:be:11:12:6b:fa:86:60:b8:77:0b:84:88:6f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff28ff447dd89ec808448730efe6200ded61780
        Validity
            Not Before: Mar  2 20:03:00 2021 GMT
            Not After : Mar  9 20:08:00 2021 GMT
        Subject: CN=3082010A02820101009FF5051ACED7D8F4F6CCA851A9857EFCA8CD57A53B6FAB9BE5E00DF7AA61748BB127E4E4E344E5F911AC8D9D0C648582671C216A3ACD20FA6A222C71422C73F80925D35ECB8AC6AEF0011C421D262FDF54247BBD7605D344B28720988AF82D9932654E16A5B28191DD142E853F29DA7F8DA950891A5471259162716FA430FB73BF4912C2D52FB3F2AA946A14A38D28DEDDDEC62B9D8539A2C4047B88921E46488208BCCF808EAA5836E742B7CA39E3E4D4FC58308FED30C6D223269CE17FC6353F1B3E8BA146F487EC3A948E2F9C9B029C83AB22BC185B84814E8F49CCA4E51415422271242B63DCA0E616B8D20623B5F294E4EDBEE6BF24A73D7CFBD1DF18770203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:05:1a:ce:d7:d8:f4:f6:cc:a8:51:a9:85:
                    7e:fc:a8:cd:57:a5:3b:6f:ab:9b:e5:e0:0d:f7:aa:
                    61:74:8b:b1:27:e4:e4:e3:44:e5:f9:11:ac:8d:9d:
                    0c:64:85:82:67:1c:21:6a:3a:cd:20:fa:6a:22:2c:
                    71:42:2c:73:f8:09:25:d3:5e:cb:8a:c6:ae:f0:01:
                    1c:42:1d:26:2f:df:54:24:7b:bd:76:05:d3:44:b2:
                    87:20:98:8a:f8:2d:99:32:65:4e:16:a5:b2:81:91:
                    dd:14:2e:85:3f:29:da:7f:8d:a9:50:89:1a:54:71:
                    25:91:62:71:6f:a4:30:fb:73:bf:49:12:c2:d5:2f:
                    b3:f2:aa:94:6a:14:a3:8d:28:de:dd:de:c6:2b:9d:
                    85:39:a2:c4:04:7b:88:92:1e:46:48:82:08:bc:cf:
                    80:8e:aa:58:36:e7:42:b7:ca:39:e3:e4:d4:fc:58:
                    30:8f:ed:30:c6:d2:23:26:9c:e1:7f:c6:35:3f:1b:
                    3e:8b:a1:46:f4:87:ec:3a:94:8e:2f:9c:9b:02:9c:
                    83:ab:22:bc:18:5b:84:81:4e:8f:49:cc:a4:e5:14:
                    15:42:22:71:24:2b:63:dc:a0:e6:16:b8:d2:06:23:
                    b5:f2:94:e4:ed:be:e6:bf:24:a7:3d:7c:fb:d1:df:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5A:1C:99:DF:72:A9:5E:9C:A0:A4:C4:C6:67:C0:A3:59:17:EE:1B
            X509v3 Authority Key Identifier:
                keyid:1F:F2:8F:F4:47:DD:89:EC:80:84:48:73:0E:FE:62:00:DE:D6:17:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/168/1FF28FF447DD89EC808448730EFE6200DED61780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_KP9EfdieyAhEhzDv5iAN7WF4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/168/1FF28FF447DD89EC808448730EFE6200DED61780.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2c:96:fd:79:c9:bd:ad:6d:26:32:b4:54:fc:bb:75:65:d4:
         e4:26:2c:26:5e:8b:b9:e7:e8:f0:09:54:b4:f3:7f:6d:25:cc:
         8a:da:31:7d:68:33:89:14:06:30:01:7a:6e:c8:a9:1f:11:af:
         35:6c:84:b1:7e:d6:9d:f6:73:35:9d:e4:1b:6c:1c:d8:96:27:
         47:49:11:bc:0e:75:d2:70:bd:ed:44:96:7c:3a:be:f1:cb:ed:
         79:ca:57:8d:a4:08:4f:38:85:d8:8b:9e:f5:27:4a:13:52:bd:
         1c:f7:29:00:ea:d5:c0:75:47:a3:6e:c5:62:e4:91:a5:d9:34:
         2c:d4:91:7d:d1:03:06:db:4f:ba:45:79:4c:f4:51:ab:3b:fa:
         1e:05:d6:8b:af:bf:b0:76:57:62:e8:8c:36:23:fe:d3:56:f5:
         f1:5a:80:19:86:5c:6c:0f:7c:a2:52:80:86:b0:f7:3a:eb:8e:
         33:89:f2:c5:1f:90:b0:9e:3e:cb:e0:22:a2:59:e2:de:4e:e5:
         a8:12:b3:14:7c:6e:78:f6:78:40:f2:9a:66:2f:88:aa:f1:e0:
         87:69:61:45:e6:d3:36:94:3c:57:84:bf:31:d4:83:b1:d5:79:
         0a:b2:23:0b:aa:e4:2c:8e:90:69:a9:10:6d:56:be:a2:2b:fb:
         99:21:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----