Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/172/352207C52E4DB89EB6D6A0AA2B8EDC63214EED83.mft
File:                     352207C52E4DB89EB6D6A0AA2B8EDC63214EED83.mft (raw, json)
Hash identifier:          gXeAWAB9VoJKOTd3/3/dVTAqw/ihlBQgryXKDGWihJI=
Subject key identifier:   08:DC:89:2E:6D:3C:28:4F:53:0A:4B:DC:68:D3:D0:41:5E:15:1E:B5
Authority key identifier: 35:22:07:C5:2E:4D:B8:9E:B6:D6:A0:AA:2B:8E:DC:63:21:4E:ED:83
Certificate issuer:       /CN=352207c52e4db89eb6d6a0aa2b8edc63214eed83
Certificate serial:       574424103EFA202C7BCFECA629A39DFBF1A0179C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NSIHxS5NuJ621qCqK47cYyFO7YM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/172/352207C52E4DB89EB6D6A0AA2B8EDC63214EED83.mft
Manifest number:          88
Signing time:             Tue 02 Mar 2021 18:42:00 +0000
Manifest this update:     Tue 02 Mar 2021 18:37:00 +0000
Manifest next update:     Wed 03 Mar 2021 18:42:00 +0000
Files and hashes:         1: 352207C52E4DB89EB6D6A0AA2B8EDC63214EED83.crl (hash: rvNV4gPi1qnktgUQFUI1/RzWcN+t+THM38Kf1Yaws1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:44:24:10:3e:fa:20:2c:7b:cf:ec:a6:29:a3:9d:fb:f1:a0:17:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352207c52e4db89eb6d6a0aa2b8edc63214eed83
        Validity
            Not Before: Mar  2 18:37:00 2021 GMT
            Not After : Mar  9 18:42:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:da:e6:4e:2d:3a:bb:47:65:3a:3c:d9:01:
                    c7:6d:19:2b:7f:67:84:5e:6b:05:40:6f:27:e5:95:
                    6e:07:19:83:65:29:07:e6:f6:7c:8c:fa:e9:e0:cf:
                    7f:87:76:23:94:ae:79:2a:d0:7c:a2:12:b2:03:49:
                    07:91:6c:3a:44:9e:d0:58:5a:0a:59:4e:7e:f7:86:
                    92:96:2e:2b:41:80:8d:90:88:1c:d7:7c:bd:58:6f:
                    e8:e1:03:d5:a3:87:04:c3:f5:66:d7:5d:62:82:68:
                    f8:b1:95:f6:3c:21:8f:30:1a:46:03:df:ff:4c:8e:
                    ce:33:b9:bf:98:ee:f8:9d:ba:59:84:5f:c4:e8:70:
                    c3:b7:c9:30:b3:a9:9c:90:f8:ba:24:58:c6:c3:07:
                    3f:6d:c0:97:59:e3:19:6c:aa:b7:1b:23:7a:9a:84:
                    be:1a:86:75:2b:c7:1b:d3:df:65:7b:5d:bb:49:cc:
                    b2:44:35:60:97:fe:9e:de:1d:72:db:2c:cb:85:8b:
                    a2:39:16:4b:fb:b7:3a:f7:75:e1:1d:9a:a0:c3:82:
                    73:c2:32:f2:44:66:33:d7:d6:e6:02:e1:09:c5:17:
                    bc:f1:f7:b2:a6:b7:a9:3c:3c:ea:ed:16:fa:34:e5:
                    33:1b:ea:81:f3:c7:8b:46:35:cf:22:70:ce:04:94:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DC:89:2E:6D:3C:28:4F:53:0A:4B:DC:68:D3:D0:41:5E:15:1E:B5
            X509v3 Authority Key Identifier:
                keyid:35:22:07:C5:2E:4D:B8:9E:B6:D6:A0:AA:2B:8E:DC:63:21:4E:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/172/352207C52E4DB89EB6D6A0AA2B8EDC63214EED83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSIHxS5NuJ621qCqK47cYyFO7YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/172/352207C52E4DB89EB6D6A0AA2B8EDC63214EED83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ee:7c:cc:56:33:e6:dd:c3:de:57:ff:6c:77:40:50:c0:33:
         69:25:0e:c3:0e:87:3c:59:d6:27:62:eb:a5:d5:f5:4a:84:ee:
         7c:41:78:9c:c1:49:5f:58:33:42:1a:8f:b3:f2:01:78:9b:67:
         e5:26:fc:ee:85:c8:25:96:99:ce:e2:c5:78:fe:ec:8a:e4:7c:
         c4:42:ea:dc:e6:f0:d6:3a:a8:b7:54:57:10:4d:b2:62:3d:a6:
         94:c3:7b:3c:4a:16:12:ba:24:f5:99:8b:8a:25:25:78:3f:e1:
         70:ee:03:ee:21:34:fc:17:8c:48:4c:07:df:9f:e8:63:fc:b6:
         48:d6:2c:7d:f6:c8:70:62:2c:f7:57:ad:6f:34:f0:43:44:bb:
         45:6a:8e:35:9a:6d:1e:c0:df:75:23:34:47:bc:94:fa:38:32:
         3e:b0:28:f1:8a:bc:8a:f9:fc:60:81:14:6e:e5:e7:3e:25:a1:
         29:c1:7c:d1:35:5c:9b:c3:f9:f8:97:20:df:2a:f2:92:1f:12:
         e1:27:72:02:e3:33:03:ee:53:14:cb:45:3a:24:13:9b:9e:da:
         91:d2:87:3a:d0:bc:a5:04:67:f6:89:07:e2:09:24:79:9d:37:
         a6:74:c7:b5:65:69:08:cc:e2:d0:8b:c3:f9:76:a1:ed:bf:df:
         cd:4a:e3:43
-----BEGIN CERTIFICATE-----
MIIG8TCCBdmgAwIBAgIUV0QkED76ICx7z+ymKaOd+/GgF5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUyMjA3YzUyZTRkYjg5ZWI2ZDZhMGFhMmI4ZWRjNjMy
MTRlZWQ4MzAeFw0yMTAzMDIxODM3MDBaFw0yMTAzMDkxODQyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzVCM0RBRTY0RTJEM0FCQjQ3
NjUzQTNDRDkwMUM3NkQxOTJCN0Y2Nzg0NUU2QjA1NDA2RjI3RTU5NTZFMDcxOTgz
NjUyOTA3RTZGNjdDOENGQUU5RTBDRjdGODc3NjIzOTRBRTc5MkFEMDdDQTIxMkIy
MDM0OTA3OTE2QzNBNDQ5RUQwNTg1QTBBNTk0RTdFRjc4NjkyOTYyRTJCNDE4MDhE
OTA4ODFDRDc3Q0JENTg2RkU4RTEwM0Q1QTM4NzA0QzNGNTY2RDc1RDYyODI2OEY4
QjE5NUY2M0MyMThGMzAxQTQ2MDNERkZGNEM4RUNFMzNCOUJGOThFRUY4OURCQTU5
ODQ1RkM0RTg3MEMzQjdDOTMwQjNBOTlDOTBGOEJBMjQ1OEM2QzMwNzNGNkRDMDk3
NTlFMzE5NkNBQUI3MUIyMzdBOUE4NEJFMUE4Njc1MkJDNzFCRDNERjY1N0I1REJC
NDlDQ0IyNDQzNTYwOTdGRTlFREUxRDcyREIyQ0NCODU4QkEyMzkxNjRCRkJCNzNB
Rjc3NUUxMUQ5QUEwQzM4MjczQzIzMkYyNDQ2NjMzRDdENkU2MDJFMTA5QzUxN0JD
RjFGN0IyQTZCN0E5M0MzQ0VBRUQxNkZBMzRFNTMzMUJFQTgxRjNDNzhCNDYzNUNG
MjI3MENFMDQ5NDVBQzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxbPa5k4tOrtHZTo82QHHbRkrf2eEXmsFQG8n5ZVuBxmDZSkH5vZ8
jPrp4M9/h3YjlK55KtB8ohKyA0kHkWw6RJ7QWFoKWU5+94aSli4rQYCNkIgc13y9
WG/o4QPVo4cEw/Vm111igmj4sZX2PCGPMBpGA9//TI7OM7m/mO74nbpZhF/E6HDD
t8kws6mckPi6JFjGwwc/bcCXWeMZbKq3GyN6moS+GoZ1K8cb099le127ScyyRDVg
l/6e3h1y2yzLhYuiORZL+7c693XhHZqgw4JzwjLyRGYz19bmAuEJxRe88feyprep
PDzq7Rb6NOUzG+qB88eLRjXPInDOBJRawwIDAQABo4IB/zCCAfswHQYDVR0OBBYE
FAjciS5tPChPUwpL3GjT0EFeFR61MB8GA1UdIwQYMBaAFDUiB8UuTbiettagqiuO
3GMhTu2DMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNzIvMzUy
MjA3QzUyRTREQjg5RUI2RDZBMEFBMkI4RURDNjMyMTRFRUQ4My5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL05TSUh4UzVOdUo2MjFxQ3FLNDdjWXlGTzdZTS5jZXIw
fAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNzIvMzUyMjA3QzUyRTREQjg5
RUI2RDZBMEFBMkI4RURDNjMyMTRFRUQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHrufMxWM+bdw95X
/2x3QFDAM2klDsMOhzxZ1idi66XV9UqE7nxBeJzBSV9YM0Iaj7PyAXibZ+Um/O6F
yCWWmc7ixXj+7IrkfMRC6tzm8NY6qLdUVxBNsmI9ppTDezxKFhK6JPWZi4olJXg/
4XDuA+4hNPwXjEhMB9+f6GP8tkjWLH32yHBiLPdXrW808ENEu0VqjjWabR7A33Uj
NEe8lPo4Mj6wKPGKvIr5/GCBFG7l5z4loSnBfNE1XJvD+fiXIN8q8pIfEuEncgLj
MwPuUxTLRTokE5ue2pHShzrQvKUEZ/aJB+IJJHmdN6Z0x7VlaQjM4tCLw/l2oe2/
381K40M=
-----END CERTIFICATE-----