Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/191/9A39239FD8B7752CD35E43227D983A7433F55A46.mft
File:                     9A39239FD8B7752CD35E43227D983A7433F55A46.mft (raw, json)
Hash identifier:          cM5Ycvs7ykadufURjSFsdiJSvO3oTIK9LDcqghf30c0=
Subject key identifier:   9A:37:20:3E:8D:6C:B4:08:69:D0:8D:2B:1B:E9:8F:62:CB:94:57:85
Authority key identifier: 9A:39:23:9F:D8:B7:75:2C:D3:5E:43:22:7D:98:3A:74:33:F5:5A:46
Certificate issuer:       /CN=9a39239fd8b7752cd35e43227d983a7433f55a46
Certificate serial:       749EE637A7E956ADF678F100DB8777C35BEC4BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjkjn9i3dSzTXkMifZg6dDP1WkY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/191/9A39239FD8B7752CD35E43227D983A7433F55A46.mft
Manifest number:          030F
Signing time:             Sun 26 Mar 2023 13:09:15 +0000
Manifest this update:     Sun 26 Mar 2023 13:04:15 +0000
Manifest next update:     Mon 27 Mar 2023 16:29:15 +0000
Files and hashes:         1: 9A39239FD8B7752CD35E43227D983A7433F55A46.crl (hash: raTCf6ZENJCD+9Y+l+0Cvndkok6Iai4suqUOlytTO9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9e:e6:37:a7:e9:56:ad:f6:78:f1:00:db:87:77:c3:5b:ec:4b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a39239fd8b7752cd35e43227d983a7433f55a46
        Validity
            Not Before: Mar 26 13:04:15 2023 GMT
            Not After : Mar 27 16:29:15 2023 GMT
        Subject: CN=9A37203E8D6CB40869D08D2B1BE98F62CB945785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:35:8a:df:de:94:6d:4e:ee:4e:5a:77:8c:
                    54:af:88:23:ca:6c:ea:51:91:44:24:ff:f0:dc:06:
                    75:21:cf:29:01:5d:02:f9:ba:e9:3d:07:96:e9:5e:
                    4b:f6:fd:7f:09:82:11:11:a5:d2:78:df:4b:36:c7:
                    41:c3:cb:e7:79:77:7b:c7:3b:7e:39:5e:6c:98:f9:
                    d8:74:53:57:ac:5f:99:c5:42:b0:49:bb:11:ff:10:
                    20:1f:bb:49:ff:d0:bc:7d:21:98:8c:31:a8:6c:8b:
                    4d:bb:d8:01:eb:06:05:84:4a:62:5d:be:57:fc:cf:
                    eb:2a:6f:eb:3f:7f:21:d1:88:a1:cc:23:b7:ac:e3:
                    99:32:e5:81:99:cd:1d:1d:36:2c:ce:b7:93:3a:51:
                    ab:f3:49:78:0f:92:19:1a:70:3a:6b:ac:87:b5:85:
                    2b:e3:d2:58:a9:12:92:da:3a:0e:48:63:8f:34:68:
                    cf:64:45:f6:b8:b5:39:9a:9b:63:ac:13:1f:ce:4c:
                    25:99:36:9d:4e:09:e8:6e:68:c9:ce:2b:e2:a0:59:
                    62:e1:77:61:9e:54:a2:7b:47:aa:cb:b5:15:62:22:
                    d8:69:eb:39:c3:f8:5e:20:7d:af:38:f0:68:a7:30:
                    ab:1d:a9:28:b1:db:88:1b:c9:92:13:37:1a:3a:45:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:37:20:3E:8D:6C:B4:08:69:D0:8D:2B:1B:E9:8F:62:CB:94:57:85
            X509v3 Authority Key Identifier:
                keyid:9A:39:23:9F:D8:B7:75:2C:D3:5E:43:22:7D:98:3A:74:33:F5:5A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/191/9A39239FD8B7752CD35E43227D983A7433F55A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjkjn9i3dSzTXkMifZg6dDP1WkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/191/9A39239FD8B7752CD35E43227D983A7433F55A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:c5:24:5a:c0:a0:b2:29:1c:e9:a9:6c:99:c3:3d:d9:bd:
         ca:99:4d:59:39:9d:81:55:34:a6:50:1a:4a:48:9b:0b:5c:ac:
         ad:a7:0f:4e:5f:1d:ba:2a:ee:80:37:63:15:ea:51:f1:bb:45:
         58:30:7a:a4:77:f6:f2:c1:82:dc:58:50:d7:df:00:02:47:b9:
         11:1c:0e:6c:4d:87:9a:c2:de:71:29:03:90:c3:09:6a:10:c4:
         1f:ee:4e:0e:f9:6c:c1:22:a1:e1:ad:e9:a3:2d:c2:8f:64:6e:
         eb:d0:87:30:66:1d:c1:9c:77:df:d9:58:d9:ed:c0:3e:33:d6:
         20:9c:02:7f:93:e0:d0:07:a1:df:3e:4d:2c:30:1e:8c:c7:cc:
         d0:af:e3:43:b1:96:71:a5:22:e3:ab:60:f0:2e:71:cb:2a:f3:
         51:de:f1:e6:87:1f:4d:e9:d3:9a:60:40:f8:9f:e7:9d:93:5f:
         63:4b:83:f9:1a:6e:43:9e:8d:66:6f:0e:cf:60:c3:f8:3b:3c:
         c6:e3:2a:8f:ef:75:6c:77:3d:06:6a:4f:3c:3a:ce:19:df:28:
         9b:2b:9f:f1:b0:5e:ad:76:fc:9a:d8:9a:c2:ac:8c:5a:e3:78:
         aa:4e:9e:1c:18:c9:7a:72:d1:fd:4c:95:48:d4:74:d4:a5:4b:
         f2:6a:fa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----