Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.mft
File:                     67A6E5206BE3501DDD38D6F31C3368200C43A473.mft (raw, json)
Hash identifier:          Y5WB5xJwyxipEgD2KOL170cWcZUKL91n7PL56Od7df0=
Subject key identifier:   B7:09:F2:AE:24:D3:DF:87:C9:FB:53:9A:28:7D:10:C5:67:57:88:77
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       40F54FA7D3CEE164BAA8D5F9B71B82F59A552A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.mft
Manifest number:          97
Signing time:             Tue 02 Mar 2021 17:56:00 +0000
Manifest this update:     Tue 02 Mar 2021 17:51:00 +0000
Manifest next update:     Wed 03 Mar 2021 17:56:00 +0000
Files and hashes:         1: 3139332e34322e312e302f32342d3234203d3e203631333137.roa (hash: JvyFLIzvAEGEOtqBgILk4QHKSo68NHhfeO8sdGobJlM=)
                          2: 3139332e34322e312e302f32342d3234203d3e203434373335.roa (hash: y/OmC4YfgjgovoKMjxZAgxep459W54+N+kpt61aMmXg=)
                          3: 3139332e34322e302e302f32342d3234203d3e203631333137.roa (hash: AfcSVQmT88T5UNVm/UgTKDRtzj99dmEC8F3uYByIF18=)
                          4: 3139332e34322e3133372e302f32342d3234203d3e20333938343638.roa (hash: yp3jCpTC+nfAQyYb+k6B1llGk3/sckBHXLeYlI74EtY=)
                          5: 3139332e34322e302e302f32342d3234203d3e20323132303737.roa (hash: QTNHMcaY2KhwEHz+QKXzlpaOEYcSrfG/OQCU1G86Bc8=)
                          6: 3139332e34322e302e302f32342d3234203d3e203632303638.roa (hash: iGeO7gYFW9j8nurGa4tWnd5rE79TYKgkiw+5hXRWsvE=)
                          7: 3139332e34322e3133362e302f32342d3234203d3e203235303938.roa (hash: 3ATF3d4rSbVP2wUtOzGN72aVAy6etuw6A0yaH5K6CNM=)
                          8: 3139332e34322e302e302f32342d3234203d3e20323037373837.roa (hash: D/snCfx+ESjYtBBIw6yZK0Ks0DBaNUAH2A8BbSh7Sg0=)
                          9: 3139332e34322e302e302f32342d3234203d3e203439353434.roa (hash: J8dWkgcwWdQ8fXKnxOWzT6UeQc5z49Sf1gtZY0ElbEE=)
                          10: 67A6E5206BE3501DDD38D6F31C3368200C43A473.crl (hash: mLzyDAytAaGs4LVzdicItmLFddxGa3ZKjp4s5VW7S/w=)
                          11: 3139332e34322e302e302f32342d3234203d3e20323132323938.roa (hash: kmwtywJF5F5lznhpJhXhzfk06w24SprnU/N9gC/Z+9E=)
                          12: 3139332e34322e302e302f32342d3234203d3e20323131383331.roa (hash: bf1Rrsc6EcY77+nx2WGZjBIfPBe6YDK918EhkQvqpAw=)
                          13: 3139332e34322e302e302f32342d3234203d3e20323037313131.roa (hash: eBWJG1otm/hqZd5wnOSP53J/4vSe5ClaMq8JY5PjMVQ=)
                          14: 3139332e34322e3133372e302f32342d3234203d3e203631333137.roa (hash: dOgec+PH8LDXwjgC3ZB8+D9gm5/CzUQNVFRx+B1uCM4=)
                          15: 3139332e34322e3133362e302f32342d3234203d3e203631333137.roa (hash: 3kGwmcxf4EqAcKZ3Jpa/WTNh2qQVWuBwu20R9JiWq6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f5:4f:a7:d3:ce:e1:64:ba:a8:d5:f9:b7:1b:82:f5:9a:55:2a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Mar  2 17:51:00 2021 GMT
            Not After : Mar  9 17:56:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:1a:98:3d:bd:17:9f:0b:6e:42:6d:19:51:
                    00:9d:9a:8d:51:5b:27:67:ac:a4:c9:91:46:dc:bc:
                    94:b5:a1:41:84:42:95:22:79:b8:86:9a:f7:3a:ce:
                    20:fd:bf:20:89:91:44:73:0f:e5:68:26:ce:fd:0f:
                    a3:d9:e6:b4:70:1a:fc:32:52:b8:2e:02:f3:eb:a9:
                    9d:4f:f5:43:a4:85:0f:86:37:70:bf:9b:4a:66:09:
                    69:19:9e:04:2b:15:5b:69:79:b1:ce:09:7f:8c:0f:
                    19:7f:bd:f3:f7:16:ec:2a:54:df:14:43:cc:9f:11:
                    d7:44:45:73:93:24:38:d2:28:fd:6c:ce:54:e5:d1:
                    c1:94:7a:04:ff:5a:66:81:1b:cf:22:d1:e0:89:8d:
                    86:71:9c:b1:09:6a:79:23:fa:33:ea:23:f7:20:bc:
                    86:66:35:c0:6e:ce:68:82:8e:d1:92:46:16:e2:cd:
                    71:ec:58:ac:f9:87:df:da:07:c5:5a:59:9d:c7:f4:
                    25:bb:a3:c7:b6:a4:1a:60:4f:8a:cc:1e:4b:c3:e9:
                    6a:0f:24:a8:1d:53:42:05:73:dd:8b:35:40:de:e9:
                    01:2e:6c:77:53:84:a5:48:31:8c:be:c0:8b:ce:c9:
                    69:d7:ee:54:6b:d4:6e:22:ed:28:42:b8:ea:8e:17:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:09:F2:AE:24:D3:DF:87:C9:FB:53:9A:28:7D:10:C5:67:57:88:77
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e8:9c:2d:af:71:5c:f7:82:45:91:06:aa:a8:62:35:9d:44:
         93:d4:02:33:e3:00:fb:e8:18:fd:d3:69:c3:73:b0:3e:82:6d:
         93:37:5e:c6:b0:a6:53:c5:45:56:8d:d1:bc:7e:b0:0c:f2:fc:
         c5:68:2d:bb:f2:5b:e5:f4:fe:0c:9b:1a:d7:fc:fa:a0:44:f1:
         49:63:23:ba:6d:f6:b0:34:cf:75:6e:4c:e4:12:d9:a3:d7:eb:
         a2:ed:82:12:cc:25:d7:cd:fd:73:c9:ab:b8:c3:a1:01:64:f2:
         f7:17:bb:f9:03:c0:ce:ed:b1:7a:0c:f4:08:83:59:1c:a7:7e:
         ce:18:d5:31:a5:07:e5:8a:6e:8a:bf:83:5f:56:d3:53:39:e0:
         3b:eb:4b:53:b6:43:97:6c:c2:90:89:65:af:71:f4:70:02:d0:
         3b:8b:b2:44:fd:3f:0f:b0:52:6d:77:c1:ae:9c:04:7b:23:14:
         93:42:c6:32:56:a3:19:a6:ce:cd:1d:12:f0:39:1f:b7:19:8c:
         5c:bd:07:e6:77:09:33:27:84:ad:9a:83:70:c1:88:51:cb:7d:
         2a:4d:47:ea:c3:a4:78:47:c7:03:cd:a0:25:15:13:53:28:24:
         2c:7d:49:00:c3:c0:6a:2f:be:9c:4b:a7:3a:7c:06:4f:1d:4f:
         e2:a8:24:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----