Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/189/4CD923117AB255BF36C9C04E9CB209B10C8DC35F.mft
File:                     4CD923117AB255BF36C9C04E9CB209B10C8DC35F.mft (raw, json)
Hash identifier:          PjKv+d2uuaWgVaSukihUK4L7Z6h+10yP5ArRkneus6Q=
Subject key identifier:   5F:82:15:3B:A6:36:8C:A4:60:87:ED:87:DE:EE:2A:A0:1C:75:8E:0A
Authority key identifier: 4C:D9:23:11:7A:B2:55:BF:36:C9:C0:4E:9C:B2:09:B1:0C:8D:C3:5F
Certificate issuer:       /CN=4cd923117ab255bf36c9c04e9cb209b10c8dc35f
Certificate serial:       446B3406514D0E53926D87E13DB43A134FF2C518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TNkjEXqyVb82ycBOnLIJsQyNw18.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/189/4CD923117AB255BF36C9C04E9CB209B10C8DC35F.mft
Manifest number:          0311
Signing time:             Mon 27 Mar 2023 06:15:52 +0000
Manifest this update:     Mon 27 Mar 2023 06:10:52 +0000
Manifest next update:     Tue 28 Mar 2023 06:39:52 +0000
Files and hashes:         1: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: CbAEGeWNxkXSO0bRXGKh3eO7G3E7oDt1AdHg1JGqmpc=)
                          2: 4CD923117AB255BF36C9C04E9CB209B10C8DC35F.crl (hash: FbAZwiofuUPOTA97G2LzPu0AY/IREXd3fqSpPmBJsW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6b:34:06:51:4d:0e:53:92:6d:87:e1:3d:b4:3a:13:4f:f2:c5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd923117ab255bf36c9c04e9cb209b10c8dc35f
        Validity
            Not Before: Mar 27 06:10:52 2023 GMT
            Not After : Mar 28 06:39:52 2023 GMT
        Subject: CN=5F82153BA6368CA46087ED87DEEE2AA01C758E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:ee:12:9e:5d:1c:51:b3:d6:bb:4e:57:da:
                    db:72:4c:7d:12:4f:b8:d8:b4:61:14:af:32:78:2a:
                    10:fd:2a:d4:5b:00:8e:54:08:bd:db:e6:bc:28:33:
                    43:d2:06:84:ec:b8:38:e5:9f:ee:56:c4:82:fb:46:
                    43:60:38:3e:0e:9e:5c:26:0a:85:44:a7:69:7a:16:
                    7e:df:29:a6:a7:8f:f9:38:ad:1d:2a:5d:5c:54:08:
                    d3:f8:76:f0:42:6a:63:ff:56:9b:b6:be:ca:ff:a9:
                    a7:83:49:0d:ff:a8:38:20:be:aa:a2:13:8a:7a:b9:
                    88:ea:37:c2:90:24:2f:2f:3a:88:c9:45:b3:8a:29:
                    c9:52:1f:d0:69:15:ad:d2:57:0c:e4:ba:1e:92:39:
                    da:b1:8e:91:4d:56:af:8e:f0:90:a6:44:c1:09:5f:
                    e1:42:5b:8f:ee:80:5c:32:ea:7b:20:0c:cc:43:e2:
                    c4:68:bf:17:bc:ac:a0:46:71:da:16:ad:25:20:5e:
                    22:f3:89:25:9a:10:7f:41:55:d6:8c:d2:51:2c:cd:
                    5d:4b:a3:ea:30:24:0e:81:ba:8f:79:39:e1:4f:f3:
                    6e:0c:c3:8f:34:da:6d:09:72:86:6e:b8:2f:d6:7d:
                    30:9f:08:cf:fe:58:34:8b:2a:03:11:a5:1b:7a:b5:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:82:15:3B:A6:36:8C:A4:60:87:ED:87:DE:EE:2A:A0:1C:75:8E:0A
            X509v3 Authority Key Identifier:
                keyid:4C:D9:23:11:7A:B2:55:BF:36:C9:C0:4E:9C:B2:09:B1:0C:8D:C3:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/189/4CD923117AB255BF36C9C04E9CB209B10C8DC35F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkjEXqyVb82ycBOnLIJsQyNw18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/189/4CD923117AB255BF36C9C04E9CB209B10C8DC35F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ad:1e:3b:c8:69:ff:ef:f7:b2:cf:db:ee:0b:5a:5e:e0:75:
         11:57:6f:bf:9e:fc:60:5b:27:a2:9d:8c:52:9c:a8:60:56:35:
         a9:6b:f2:04:28:7f:ae:04:12:b6:cc:2d:03:17:56:df:9c:34:
         cb:24:a8:fb:86:fe:fc:7c:cf:d2:09:ee:8c:59:26:7e:2b:fc:
         cb:27:85:6b:b7:9c:cb:21:b2:9e:bb:8a:0a:78:b5:f5:f7:a2:
         0b:1c:c9:10:a6:bd:aa:2a:fc:80:85:6f:04:10:85:5f:d1:d4:
         33:b9:e9:96:47:a0:15:19:d3:21:25:8b:ad:4b:d9:d0:72:8a:
         35:a7:4f:04:af:e1:6d:07:75:2c:a1:08:4b:54:18:ee:c4:11:
         93:83:73:50:35:8d:c2:d0:11:52:6d:8b:e1:2e:b5:ea:fe:9c:
         93:88:ae:2d:67:3a:6c:d6:fa:bd:7c:d2:71:f7:13:46:15:6d:
         af:1b:f7:3d:65:a5:2c:1c:6e:67:f7:b3:04:c7:4d:19:b0:06:
         c2:c3:b7:8b:70:1b:e2:7e:10:cd:e9:15:79:38:8a:c2:65:00:
         25:1f:3c:62:71:f2:e9:8b:21:35:7c:81:9b:f3:b8:a5:ec:af:
         09:12:20:6d:a1:98:58:56:c5:2a:89:0b:7d:5f:0d:0b:77:cb:
         32:10:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----