Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/195/BF2F3A306DA78A15E48522884810ABEEB5EF66B0.mft
File:                     BF2F3A306DA78A15E48522884810ABEEB5EF66B0.mft (raw, json)
Hash identifier:          ehmZAkUb9ulxvrmZsJlDnRXiQ7/2gu/PxhzEAbE3pys=
Subject key identifier:   5B:72:06:60:6C:A7:F5:7B:26:F8:AC:1A:9B:B6:6F:D2:C0:FB:B6:5F
Authority key identifier: BF:2F:3A:30:6D:A7:8A:15:E4:85:22:88:48:10:AB:EE:B5:EF:66:B0
Certificate issuer:       /CN=bf2f3a306da78a15e48522884810abeeb5ef66b0
Certificate serial:       5F9BD91D416B8AD9D9550DF7B62F7614C64D7697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vy86MG2nihXkhSKISBCr7rXvZrA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/195/BF2F3A306DA78A15E48522884810ABEEB5EF66B0.mft
Manifest number:          0314
Signing time:             Mon 27 Mar 2023 04:15:59 +0000
Manifest this update:     Mon 27 Mar 2023 04:10:59 +0000
Manifest next update:     Tue 28 Mar 2023 06:48:59 +0000
Files and hashes:         1: BF2F3A306DA78A15E48522884810ABEEB5EF66B0.crl (hash: Zez6N38I3+GSHdRtuM//wojqroMft4c3b8eGDx4yyRE=)
                          2: 36322e332e34362e302f32342d3234203d3e20323031333431.roa (hash: hTh7No401G2VJI6Vyy1KsVvqjKLMwjdQNfZDgPpdDHI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9b:d9:1d:41:6b:8a:d9:d9:55:0d:f7:b6:2f:76:14:c6:4d:76:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2f3a306da78a15e48522884810abeeb5ef66b0
        Validity
            Not Before: Mar 27 04:10:59 2023 GMT
            Not After : Mar 28 06:48:59 2023 GMT
        Subject: CN=5B7206606CA7F57B26F8AC1A9BB66FD2C0FBB65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:74:6e:ee:0b:69:4e:67:44:b8:a5:a0:2f:
                    2f:42:c8:6b:60:b8:41:0a:3e:ce:8b:b1:b5:0e:e8:
                    ae:c4:53:b9:d9:9a:fd:ef:54:81:89:a6:f8:fc:c2:
                    64:3f:b7:87:d5:57:46:8e:7d:b1:0f:6c:a6:e8:5a:
                    ca:b1:92:48:d5:36:f0:e1:df:45:01:a0:46:4d:a4:
                    bb:34:6d:9b:7f:e4:1d:7f:43:a6:c2:a0:3b:cf:62:
                    3b:26:76:88:83:03:c2:87:c7:1e:93:98:84:70:2c:
                    ad:05:c9:9a:91:05:0b:e4:fe:66:d4:31:b3:4b:2d:
                    b4:fd:f3:f9:cd:c8:73:87:e3:7a:c6:ce:ac:45:4d:
                    75:ac:84:79:66:5d:cb:b9:d2:d5:eb:fb:5b:fb:60:
                    c5:08:38:60:cd:57:b1:49:3c:09:a2:91:42:0e:6a:
                    a9:5e:ff:54:00:29:29:9b:54:5c:b8:45:ca:78:82:
                    63:fb:be:08:45:f4:e0:42:4c:a5:11:f1:e1:af:bf:
                    9f:0e:2a:6d:b6:b0:dc:bf:9d:67:41:4e:be:f7:d3:
                    c8:a6:d9:3c:1a:4c:7c:85:7a:6d:d9:6b:e2:f2:ab:
                    2d:91:44:73:8c:61:ce:fc:96:d0:f3:28:e5:b8:2b:
                    5b:bb:41:f9:31:0a:f5:a7:49:19:0b:8f:eb:2f:27:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:72:06:60:6C:A7:F5:7B:26:F8:AC:1A:9B:B6:6F:D2:C0:FB:B6:5F
            X509v3 Authority Key Identifier:
                keyid:BF:2F:3A:30:6D:A7:8A:15:E4:85:22:88:48:10:AB:EE:B5:EF:66:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/195/BF2F3A306DA78A15E48522884810ABEEB5EF66B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy86MG2nihXkhSKISBCr7rXvZrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/195/BF2F3A306DA78A15E48522884810ABEEB5EF66B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:34:3a:8c:cf:66:b8:09:83:87:c2:bf:90:bc:95:dd:38:e4:
         45:b0:3f:92:4d:a9:53:87:41:27:a8:4e:c4:b8:7b:2f:ab:6b:
         21:3b:00:04:8e:7d:7b:2e:c2:83:a8:47:48:83:13:f8:8b:bb:
         04:5d:8d:42:24:72:39:d6:93:e2:ee:e4:b7:25:e1:15:b6:26:
         c3:f1:bb:cc:44:54:6f:7c:9a:17:18:4c:b1:79:a3:d1:db:3a:
         d4:7d:48:c3:98:0f:9f:f2:63:bb:a1:cd:08:79:0f:1b:07:30:
         79:f4:a4:d8:e3:e2:cc:36:79:e9:cc:f4:b3:53:0e:2d:6a:a8:
         33:1e:ab:c4:97:7d:bd:07:d6:ae:b0:83:18:42:ec:a2:58:cb:
         f0:03:cf:2e:fc:b2:5f:00:50:30:9b:ac:4c:35:f2:52:40:80:
         11:8a:9f:87:0d:e9:77:b7:b1:1d:b8:70:12:43:c1:2f:35:6a:
         87:85:ed:a3:94:ed:d2:8f:a9:59:fe:0d:6f:10:b9:f2:39:1f:
         89:9d:4c:b9:67:cf:a3:01:cb:53:cc:9e:9f:93:84:d3:43:fd:
         3e:b8:db:3b:6e:ee:40:7e:37:ed:3f:3a:5b:35:46:72:2c:36:
         66:ed:35:ed:f7:1a:ba:e7:fe:86:de:01:d9:3c:15:b2:d6:03:
         88:ba:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----