Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/17/C627A4935AB181FB1A58E6B3D0333B8881BDE1D6.mft
File:                     C627A4935AB181FB1A58E6B3D0333B8881BDE1D6.mft (raw, json)
Hash identifier:          piNEGAvmiDc9Gong+ySVwE3EW7Rn/4Ng+y5IWfFOAfM=
Subject key identifier:   A9:AD:6A:58:BD:36:58:9E:E1:29:80:49:E0:24:51:1F:74:F1:35:4B
Authority key identifier: C6:27:A4:93:5A:B1:81:FB:1A:58:E6:B3:D0:33:3B:88:81:BD:E1:D6
Certificate issuer:       /CN=c627a4935ab181fb1a58e6b3d0333b8881bde1d6
Certificate serial:       2084CF4DD87108E18D2E83D7CB78B68E84F52C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xiekk1qxgfsaWOaz0DM7iIG94dY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/17/C627A4935AB181FB1A58E6B3D0333B8881BDE1D6.mft
Manifest number:          2C
Signing time:             Tue 29 Dec 2020 09:20:00 +0000
Manifest this update:     Tue 29 Dec 2020 09:15:00 +0000
Manifest next update:     Wed 30 Dec 2020 09:20:00 +0000
Files and hashes:         1: C627A4935AB181FB1A58E6B3D0333B8881BDE1D6.crl (hash: 2lVz569FaB586sn/M9hN7mPRu6Y0Eiq0TaO91w+HjoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:84:cf:4d:d8:71:08:e1:8d:2e:83:d7:cb:78:b6:8e:84:f5:2c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c627a4935ab181fb1a58e6b3d0333b8881bde1d6
        Validity
            Not Before: Dec 29 09:15:00 2020 GMT
            Not After : Jan  5 09:20:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fa:29:6a:05:3e:e8:64:5c:45:1e:cd:c3:b3:
                    d8:29:a8:5d:35:cb:3b:2f:1e:61:12:45:0c:56:90:
                    cd:49:b5:83:76:a3:65:7a:7d:d3:83:4c:37:10:6e:
                    3f:73:db:f8:fa:54:c7:0e:eb:3e:a4:95:d5:6d:10:
                    1f:db:28:f8:87:5c:dc:da:d4:c6:9a:5a:1a:6e:ea:
                    1f:35:de:22:1e:2a:c5:85:90:3c:25:c2:87:59:e9:
                    2e:07:32:86:96:bc:ac:81:88:d8:7a:74:df:7c:d4:
                    73:f5:1e:f9:26:48:1d:95:66:61:0b:cc:a3:bb:71:
                    d9:e7:64:78:54:ae:ab:26:02:d9:1d:2e:66:73:b9:
                    9d:a5:f3:2b:a8:90:d7:37:ae:0a:92:d3:41:06:75:
                    6d:b7:60:9d:54:85:fc:86:2c:bc:1d:27:5a:b6:4a:
                    25:b4:b0:dd:0a:10:51:e7:1b:43:aa:ac:7d:89:a1:
                    4d:dd:61:91:2a:58:e3:3a:21:d2:4b:67:98:1a:13:
                    3a:e5:44:7f:00:97:f1:20:c8:05:d3:e6:e1:c2:b6:
                    a6:7c:4f:2c:13:d3:ea:ea:7e:2f:60:28:cd:84:c3:
                    16:2f:cd:34:16:f0:57:47:1b:cb:98:86:f0:d3:9b:
                    38:b1:b5:b1:18:55:3b:39:47:cd:29:3a:cc:d8:07:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AD:6A:58:BD:36:58:9E:E1:29:80:49:E0:24:51:1F:74:F1:35:4B
            X509v3 Authority Key Identifier:
                keyid:C6:27:A4:93:5A:B1:81:FB:1A:58:E6:B3:D0:33:3B:88:81:BD:E1:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/17/C627A4935AB181FB1A58E6B3D0333B8881BDE1D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiekk1qxgfsaWOaz0DM7iIG94dY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/17/C627A4935AB181FB1A58E6B3D0333B8881BDE1D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:76:fc:8a:6c:a4:ec:4f:76:42:f6:38:18:3c:9a:94:fd:c7:
         fe:db:6c:4d:aa:15:17:ea:ff:85:55:7a:48:d2:41:5d:7d:dc:
         09:96:6d:4e:be:b5:15:eb:f2:fb:76:46:35:bd:14:72:d5:7d:
         1b:ab:8c:d7:22:5f:dc:3e:2b:c0:eb:57:03:af:7a:40:4c:0b:
         fb:64:03:34:e5:82:10:cd:21:34:a5:13:32:8b:f2:92:8e:46:
         78:aa:b2:9d:4e:89:ef:4d:bd:e3:ee:c7:64:ae:b3:d8:58:1c:
         a3:88:fd:9a:88:16:f2:c4:f5:dc:9e:90:1c:2d:97:8f:ff:3f:
         fa:1b:dd:c0:47:11:fc:88:6f:9f:1d:73:17:b4:07:28:5c:9f:
         58:8f:2f:02:de:f1:b4:10:17:da:11:5f:4d:dd:a1:1f:d2:e2:
         61:e7:b5:46:5c:af:3a:be:b0:a4:c6:53:b6:55:ed:f3:64:66:
         99:c0:2d:01:d4:64:c8:bb:ca:a5:93:71:34:75:44:e6:a9:c6:
         88:34:9c:01:71:ca:54:a1:c3:c9:1a:4a:98:25:aa:ce:fc:1c:
         45:a3:4c:66:6c:10:f9:b8:0c:a0:ac:4f:18:87:d7:2d:b7:c4:
         d8:87:57:97:16:0a:28:40:61:a9:01:56:4e:93:25:5a:46:b2:
         58:fe:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----