Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/171/AA7DE755165181EE768376D8A9F7480309AD4C2E.mft
File:                     AA7DE755165181EE768376D8A9F7480309AD4C2E.mft (raw, json)
Hash identifier:          DfOx82N1bF6UZv6PiuQPLc0xKWjEWV0DENvy1p7DHrA=
Subject key identifier:   14:1F:84:66:C7:28:A4:33:A6:CC:EE:31:74:5A:98:DA:C2:6A:11:48
Authority key identifier: AA:7D:E7:55:16:51:81:EE:76:83:76:D8:A9:F7:48:03:09:AD:4C:2E
Certificate issuer:       /CN=aa7de755165181ee768376d8a9f7480309ad4c2e
Certificate serial:       187A7188FB2343E81B1B339C925FEAF322E26BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qn3nVRZRge52g3bYqfdIAwmtTC4.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/171/AA7DE755165181EE768376D8A9F7480309AD4C2E.mft
Manifest number:          89
Signing time:             Wed 03 Mar 2021 02:18:01 +0000
Manifest this update:     Wed 03 Mar 2021 02:13:01 +0000
Manifest next update:     Thu 04 Mar 2021 02:18:01 +0000
Files and hashes:         1: 3139352e32382e32312e302f32342d3234203d3e203631333137.roa (hash: zgP7bwWCBtIH790tWjQCwFBVvDm78HeFKE9Sc2lsT8E=)
                          2: AA7DE755165181EE768376D8A9F7480309AD4C2E.crl (hash: ePxQ/yuuJqueLORpgVaRlsFD0Q250wLoAz0PqIqmqPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7a:71:88:fb:23:43:e8:1b:1b:33:9c:92:5f:ea:f3:22:e2:6b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7de755165181ee768376d8a9f7480309ad4c2e
        Validity
            Not Before: Mar  3 02:13:01 2021 GMT
            Not After : Mar 10 02:18:01 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e4:d3:d5:e0:cb:c9:87:9d:97:3f:b0:2c:d0:
                    94:38:cd:81:65:42:44:5a:d6:ba:56:55:90:14:20:
                    91:14:df:00:cc:52:cc:61:af:57:78:8f:5c:a2:bb:
                    22:c8:bc:b1:c1:78:d4:cc:9d:32:cd:91:84:39:63:
                    bf:3d:93:bf:b8:e4:31:62:a0:c8:84:20:4d:d0:9b:
                    8f:97:d1:69:fd:09:48:2e:90:f8:60:b5:5c:22:12:
                    32:20:29:af:25:e3:c5:ed:b7:d0:ae:9b:ab:9e:f5:
                    2d:a1:e9:cd:29:88:59:6d:7c:0c:e8:bd:59:08:b3:
                    84:6f:a3:2b:7a:7c:f9:59:7a:82:6c:c6:2b:f8:74:
                    5a:ae:87:00:14:cb:a2:3d:15:a5:8d:87:d3:50:36:
                    05:7e:ed:c0:be:9f:01:63:a7:cb:01:b3:22:a6:83:
                    62:3e:a1:51:cb:77:be:8d:56:d7:31:e7:09:22:7e:
                    34:16:da:f4:35:4f:fc:7c:b6:e9:67:3a:9f:b4:5a:
                    77:6c:c2:54:df:f6:e3:16:a3:df:d5:9c:a9:48:a2:
                    1f:a5:76:2b:82:cc:6a:9c:66:28:35:77:7b:95:af:
                    fb:46:1f:4a:8f:31:c9:5f:0f:cc:76:3c:56:ab:45:
                    54:dc:b9:46:f9:88:48:2e:90:a2:db:3c:95:60:1c:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1F:84:66:C7:28:A4:33:A6:CC:EE:31:74:5A:98:DA:C2:6A:11:48
            X509v3 Authority Key Identifier:
                keyid:AA:7D:E7:55:16:51:81:EE:76:83:76:D8:A9:F7:48:03:09:AD:4C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/171/AA7DE755165181EE768376D8A9F7480309AD4C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qn3nVRZRge52g3bYqfdIAwmtTC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/171/AA7DE755165181EE768376D8A9F7480309AD4C2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:3e:6a:b1:9e:50:28:20:6f:33:10:9a:cc:e7:4b:bc:1b:b5:
         40:40:99:1d:a0:39:b8:7c:61:2a:30:6a:34:34:4a:fd:08:0a:
         26:41:b2:72:5e:5e:eb:ff:02:03:40:b1:ce:bb:55:bc:4f:60:
         b5:07:99:3c:c1:61:cc:6e:84:a2:8b:07:b0:b2:ec:35:bf:a5:
         07:0f:95:35:b2:44:7b:20:5b:41:95:90:d3:00:69:e0:83:25:
         2a:39:81:ea:bc:58:0a:7f:84:9d:f1:3b:38:16:90:31:6b:94:
         ba:7a:19:8b:d4:76:5f:69:51:3c:71:b8:7d:22:71:70:cf:b4:
         77:56:76:1f:45:fe:08:3a:9e:4b:54:ac:97:59:05:e1:aa:90:
         0b:79:9a:8f:eb:fb:24:cc:f5:03:71:15:29:f5:6d:96:4e:00:
         7d:27:0e:f7:ac:65:e8:b1:81:28:f7:19:6b:57:e8:9e:f0:e3:
         32:37:cb:7d:ac:dc:65:b9:a7:06:20:1b:25:57:5f:cf:96:fb:
         6a:10:af:1f:63:5b:c3:18:0a:0f:72:2a:1d:94:b7:7f:12:23:
         0b:80:c3:a7:d3:26:02:77:24:6a:c1:7b:96:43:bc:e6:e3:76:
         25:21:2e:ae:6b:6c:ca:53:e7:59:84:d8:10:2a:6b:f4:9c:ef:
         3b:97:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----