Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/173/1E7CA0EF0E13DF30FE3B30609A0387C4C88EACA3.mft
File:                     1E7CA0EF0E13DF30FE3B30609A0387C4C88EACA3.mft (raw, json)
Hash identifier:          cxr6mavvWEw7JF6PBRQ8DArY4neb7tjWKES9fUlw7N8=
Subject key identifier:   80:17:C1:95:AD:89:1B:FE:21:6C:95:27:76:6A:22:77:25:D3:2B:F7
Authority key identifier: 1E:7C:A0:EF:0E:13:DF:30:FE:3B:30:60:9A:03:87:C4:C8:8E:AC:A3
Certificate issuer:       /CN=1e7ca0ef0e13df30fe3b30609a0387c4c88eaca3
Certificate serial:       0CD481BBBFB17414774E3BFE4209440927C6C49E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnyg7w4T3zD-OzBgmgOHxMiOrKM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/173/1E7CA0EF0E13DF30FE3B30609A0387C4C88EACA3.mft
Manifest number:          88
Signing time:             Tue 02 Mar 2021 18:30:00 +0000
Manifest this update:     Tue 02 Mar 2021 18:25:00 +0000
Manifest next update:     Wed 03 Mar 2021 18:30:00 +0000
Files and hashes:         1: 1E7CA0EF0E13DF30FE3B30609A0387C4C88EACA3.crl (hash: dOpr4Hg6J4sffNYLTMYMgbrNyA+fXOrInSJeQcxG9OQ=)
                          2: 34352e3134382e3139342e302f32342d3234203d3e20313938303930.roa (hash: XBi4GOLxkQqKuTH8mbn+qOAmr+UsEHxXvBoQlv749Ek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d4:81:bb:bf:b1:74:14:77:4e:3b:fe:42:09:44:09:27:c6:c4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7ca0ef0e13df30fe3b30609a0387c4c88eaca3
        Validity
            Not Before: Mar  2 18:25:00 2021 GMT
            Not After : Mar  9 18:30:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:d7:45:11:bf:6c:93:f2:27:b9:e0:81:f9:
                    89:84:35:87:45:4e:a5:b5:ab:99:a5:69:fe:27:0b:
                    58:0c:d4:99:28:5c:2c:0c:5d:50:02:d8:15:5d:5b:
                    3e:d8:be:90:a2:9f:3b:83:ff:96:57:88:a8:19:89:
                    36:1d:f1:d1:49:6a:29:71:b2:76:45:10:e8:46:9a:
                    5b:b5:a6:34:49:f9:7b:91:dc:23:8c:e5:5a:2d:a8:
                    68:7e:e4:a4:5f:aa:de:9f:4b:eb:a1:4b:66:a1:87:
                    8f:9a:23:56:62:eb:28:e5:27:2f:fd:4c:e5:c0:84:
                    5c:ed:02:32:fa:4a:65:be:e1:82:5b:fd:13:67:93:
                    44:19:24:ca:95:b1:7c:de:70:96:29:e9:24:17:7d:
                    59:53:df:fc:c4:f2:35:50:98:1d:10:fb:5c:8c:28:
                    3b:c8:15:69:d3:12:0e:a6:cb:61:ad:c4:21:91:2f:
                    0d:bc:27:82:f6:bd:2e:fa:18:87:fc:b0:09:03:4a:
                    0c:e9:f9:85:ea:f7:ec:29:c3:10:f8:fe:17:2c:7f:
                    88:6e:0b:27:aa:9a:a6:e3:27:09:91:7a:ec:14:3a:
                    9b:38:d9:d7:0d:0d:cc:88:94:bd:59:7d:7a:cc:7a:
                    d2:29:53:7f:03:f3:58:5e:37:d4:8f:c4:3b:e8:e0:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:17:C1:95:AD:89:1B:FE:21:6C:95:27:76:6A:22:77:25:D3:2B:F7
            X509v3 Authority Key Identifier:
                keyid:1E:7C:A0:EF:0E:13:DF:30:FE:3B:30:60:9A:03:87:C4:C8:8E:AC:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/173/1E7CA0EF0E13DF30FE3B30609A0387C4C88EACA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnyg7w4T3zD-OzBgmgOHxMiOrKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/173/1E7CA0EF0E13DF30FE3B30609A0387C4C88EACA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b3:09:92:58:3c:ab:12:f5:11:ce:ab:21:d0:1b:86:a5:f4:
         bf:6f:b1:4c:70:80:33:98:e4:96:17:52:0a:b8:d5:bf:1d:91:
         6b:d3:1b:e1:00:2c:7a:13:c7:10:fe:d3:f1:6b:ab:ce:12:18:
         dc:68:94:0e:5a:eb:42:77:93:87:42:de:ee:ef:ad:17:e4:bf:
         2a:5f:ef:d2:5c:ce:1a:4d:98:7a:95:26:04:ac:7d:06:ad:d0:
         bf:12:ce:ce:59:30:a8:08:4e:ad:4a:ac:bc:d3:21:0b:d4:b4:
         f1:79:25:73:df:10:da:8e:d0:a9:e8:16:f4:56:3b:f1:4d:11:
         9a:39:91:f1:d8:51:34:a0:18:b9:27:93:2f:27:60:ef:7d:5b:
         d4:38:41:27:4a:75:25:5b:28:b1:73:31:30:fb:2a:11:49:88:
         cf:ea:b4:e5:6f:6f:4e:d7:ef:0b:7c:57:dc:76:56:d5:30:13:
         ed:22:13:b0:66:1c:d2:51:df:bc:47:d7:50:9a:a7:8a:03:f1:
         b5:68:d3:9b:4d:93:b9:9e:47:38:6c:92:25:43:1a:38:f1:9a:
         a4:a4:d4:ef:be:ba:26:05:3d:b5:48:20:f2:9a:2d:a6:f3:64:
         5f:db:8f:0f:ea:2d:1b:70:ee:62:f5:bd:e4:3a:54:2e:1d:27:
         c1:b4:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----