Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/200/F666BD99C46FF0C69DF9E17DAE81B9A846CBE128.mft
File:                     F666BD99C46FF0C69DF9E17DAE81B9A846CBE128.mft (raw, json)
Hash identifier:          MMAu+yKM+ieZJMXOVc2at/QYgSaAR9/LlZNl6eOgtP0=
Subject key identifier:   12:68:04:36:98:78:B5:F0:DA:55:B3:0E:73:AF:88:29:34:9D:DF:41
Authority key identifier: F6:66:BD:99:C4:6F:F0:C6:9D:F9:E1:7D:AE:81:B9:A8:46:CB:E1:28
Certificate issuer:       /CN=f666bd99c46ff0c69df9e17dae81b9a846cbe128
Certificate serial:       776C6C5299DAA5066C761218AF9A037EF98F7617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ma9mcRv8Mad-eF9roG5qEbL4Sg.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/200/F666BD99C46FF0C69DF9E17DAE81B9A846CBE128.mft
Manifest number:          0311
Signing time:             Mon 27 Mar 2023 02:42:07 +0000
Manifest this update:     Mon 27 Mar 2023 02:37:07 +0000
Manifest next update:     Tue 28 Mar 2023 04:32:07 +0000
Files and hashes:         1: 36322e332e32352e302f32342d3234203d3e20323031333431.roa (hash: cR/b7nBTl8JK3OsTv5dZf7JAo4POX0esS1mXbKflJGg=)
                          2: F666BD99C46FF0C69DF9E17DAE81B9A846CBE128.crl (hash: 5ks/m0FqS2KENzmamqtD8wD0XU2PlIHTl/RGfIkiNno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6c:6c:52:99:da:a5:06:6c:76:12:18:af:9a:03:7e:f9:8f:76:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f666bd99c46ff0c69df9e17dae81b9a846cbe128
        Validity
            Not Before: Mar 27 02:37:07 2023 GMT
            Not After : Mar 28 04:32:07 2023 GMT
        Subject: CN=126804369878B5F0DA55B30E73AF8829349DDF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:d5:c6:ef:76:3d:63:af:6b:3d:b6:80:12:
                    c7:18:43:b1:c3:3a:e9:f3:d0:fb:80:79:22:cd:0e:
                    1a:50:e0:a6:f1:2e:64:13:12:12:a9:da:37:30:87:
                    6b:46:d5:b1:31:65:6f:73:78:a7:e5:74:0c:04:f8:
                    14:a8:20:d9:d6:bf:95:59:91:07:a0:a3:e5:cb:45:
                    df:70:af:46:e1:27:47:35:c3:22:cf:a2:9f:54:00:
                    df:4f:9f:a0:54:48:3f:f0:06:90:04:79:ac:d4:43:
                    89:77:4a:86:e0:14:6b:f1:d9:ed:f0:b7:70:ed:9c:
                    0e:47:f0:d5:e0:7a:5d:3b:81:97:5b:85:27:13:6d:
                    df:fd:91:81:0f:70:f2:ed:e2:1e:b4:43:37:27:8c:
                    d4:a3:97:bc:89:9e:01:52:f2:28:6b:3b:a3:a7:7b:
                    f7:7a:5c:b0:53:5c:84:88:65:e5:ae:7b:5d:df:5d:
                    07:fb:34:a3:60:bf:1b:9e:f6:7b:01:30:7f:6e:2d:
                    13:2a:c1:f0:23:e1:b9:59:b5:52:26:94:9d:c2:c3:
                    81:a2:42:5e:24:ac:d3:e0:b0:7f:26:be:45:9f:da:
                    4c:e7:5d:8a:ee:47:b1:82:8e:31:ca:97:7d:49:70:
                    a3:72:14:43:83:31:b9:1e:dd:bb:de:f2:e4:f9:08:
                    6f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:68:04:36:98:78:B5:F0:DA:55:B3:0E:73:AF:88:29:34:9D:DF:41
            X509v3 Authority Key Identifier:
                keyid:F6:66:BD:99:C4:6F:F0:C6:9D:F9:E1:7D:AE:81:B9:A8:46:CB:E1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/200/F666BD99C46FF0C69DF9E17DAE81B9A846CBE128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ma9mcRv8Mad-eF9roG5qEbL4Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/200/F666BD99C46FF0C69DF9E17DAE81B9A846CBE128.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:af:fc:1b:ed:68:89:9d:2d:54:ba:8c:6b:a5:34:dc:b8:ba:
         a8:40:eb:e6:53:56:2d:3a:3e:45:dd:04:e2:7c:9e:05:f8:62:
         3f:b9:4c:5c:49:9e:eb:54:7e:f2:a9:2f:ad:ec:7f:f9:50:56:
         c3:b6:be:65:48:59:b8:92:12:24:ff:cf:d6:1d:f2:ed:31:5c:
         f9:c4:1b:03:9c:0c:7f:66:f3:9f:57:5b:54:53:f8:6e:e5:71:
         7a:22:ee:24:a4:91:25:dc:c4:cf:e9:51:c5:2e:86:05:67:93:
         3e:2f:75:4d:d1:4f:05:68:dc:c7:f9:ab:50:f3:c5:47:64:e2:
         1d:01:25:5a:00:3b:7d:b8:86:7e:59:52:7b:2f:59:42:9f:90:
         53:d8:39:a9:03:a8:4c:13:1c:9b:c0:5f:a7:c8:1c:19:06:57:
         43:11:f5:06:b4:a0:89:e2:6e:64:43:3b:13:89:80:41:21:23:
         7a:d1:ce:c0:96:e0:61:10:2d:53:57:ee:e7:48:f5:b0:85:e2:
         bc:d8:c5:e1:85:a1:55:8a:17:60:e1:af:2d:dd:8c:9f:f7:69:
         7d:bb:af:2c:41:80:03:af:b0:39:b1:a5:db:c2:5c:d8:65:ac:
         5b:62:39:ed:4f:d8:7e:cd:79:e4:44:98:d1:b6:ef:83:1d:f5:
         45:de:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----