Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/208/382D1187A9E2AD4FDB744A920DDC515D11427A82.mft
File:                     382D1187A9E2AD4FDB744A920DDC515D11427A82.mft (raw, json)
Hash identifier:          Ei6b08pYcdCxssQFpDXzzf3E946x9lnFLIATkyRdgSA=
Subject key identifier:   BA:22:64:00:A8:42:FE:91:09:08:80:B3:83:D0:26:43:80:07:48:97
Authority key identifier: 38:2D:11:87:A9:E2:AD:4F:DB:74:4A:92:0D:DC:51:5D:11:42:7A:82
Certificate issuer:       /CN=382d1187a9e2ad4fdb744a920ddc515d11427a82
Certificate serial:       5F7F50F255B78ACE15E87E7E86E2ED3E5343E06E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OC0Rh6nirU_bdEqSDdxRXRFCeoI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/208/382D1187A9E2AD4FDB744A920DDC515D11427A82.mft
Manifest number:          02F6
Signing time:             Mon 27 Mar 2023 05:23:46 +0000
Manifest this update:     Mon 27 Mar 2023 05:18:46 +0000
Manifest next update:     Tue 28 Mar 2023 08:11:46 +0000
Files and hashes:         1: 34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa (hash: 1yOufqcjKgsMdSZJMTQUH8x2FlXApUYP65dXW+mtwkU=)
                          2: 382D1187A9E2AD4FDB744A920DDC515D11427A82.crl (hash: IN2BUY+uhzr6zJR4zMgA6nvVS+qTmoFzgpQTlPwYdOQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7f:50:f2:55:b7:8a:ce:15:e8:7e:7e:86:e2:ed:3e:53:43:e0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382d1187a9e2ad4fdb744a920ddc515d11427a82
        Validity
            Not Before: Mar 27 05:18:46 2023 GMT
            Not After : Mar 28 08:11:46 2023 GMT
        Subject: CN=BA226400A842FE91090880B383D0264380074897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:13:6b:71:8c:c0:98:9d:d3:bc:d7:39:80:
                    2f:2c:0e:b8:7d:b3:89:2a:4a:b1:58:cc:37:d2:da:
                    d4:2f:e9:dd:a5:59:f4:2e:c5:fd:6a:18:59:66:0c:
                    21:dc:04:96:50:cb:02:d6:48:9c:f4:e2:1c:94:b0:
                    a6:17:6b:c5:55:c5:20:e0:3c:b9:46:ee:2f:55:c8:
                    fe:eb:4c:6a:a8:78:76:b2:9c:21:d6:3d:00:f7:08:
                    41:f2:10:20:f2:7f:0d:23:bf:0b:3c:2f:3f:e2:53:
                    bf:91:71:9c:71:41:28:8d:e8:c5:54:17:5b:af:e1:
                    72:e2:71:13:ab:bc:2a:87:1d:40:92:0a:b5:b9:bb:
                    c8:c5:da:88:21:20:dc:d3:cf:e9:bf:51:c7:bd:2d:
                    a1:0c:53:7a:f1:d0:53:d9:5d:cd:13:46:cd:07:14:
                    df:95:22:9c:a7:32:a7:db:d6:bc:10:51:e5:42:d3:
                    29:62:9f:a9:55:65:c8:03:cf:82:ba:d2:6d:3d:eb:
                    ed:e1:58:2c:47:5b:e8:15:6a:d1:39:bf:f3:a7:5e:
                    17:f8:af:3d:d4:e4:07:e8:43:81:16:2c:aa:d9:0d:
                    05:6a:58:e4:08:1b:69:0b:cd:82:d0:a3:50:a6:89:
                    3a:9f:41:b7:9e:fd:14:a4:d1:e8:f4:e7:ec:70:3d:
                    84:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:22:64:00:A8:42:FE:91:09:08:80:B3:83:D0:26:43:80:07:48:97
            X509v3 Authority Key Identifier:
                keyid:38:2D:11:87:A9:E2:AD:4F:DB:74:4A:92:0D:DC:51:5D:11:42:7A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/208/382D1187A9E2AD4FDB744A920DDC515D11427A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC0Rh6nirU_bdEqSDdxRXRFCeoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/208/382D1187A9E2AD4FDB744A920DDC515D11427A82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:66:cb:15:5f:fb:dc:3e:c1:01:3a:de:ba:70:7e:92:a1:3c:
         98:7f:ca:45:9c:6a:5b:4e:e3:58:91:e6:6a:54:b9:83:e1:ba:
         95:d4:a4:aa:6f:b7:ac:0f:c4:d8:69:ab:3d:4c:4e:87:a3:5a:
         b7:f7:d6:b8:e7:c4:a8:e6:7a:62:4a:f1:69:fe:d9:21:6c:b8:
         fb:48:57:00:cd:bc:73:72:5e:e9:36:80:69:d4:2b:7d:3a:97:
         0b:c0:d8:f8:f7:bc:6e:e5:8e:3a:a7:af:f6:97:8f:84:7e:18:
         5e:99:f2:c2:b6:90:1f:1f:6a:26:1d:8f:a5:a2:ae:4c:d1:34:
         33:e7:1d:5b:cc:d4:11:de:51:41:fa:98:8b:6a:45:9b:e5:ea:
         82:07:fe:c7:9f:e0:9c:83:8b:d6:06:cc:dd:64:53:b8:0e:56:
         5f:f4:17:f5:ee:4c:e9:64:1a:3f:72:14:e8:c5:e7:0d:e7:3a:
         a5:38:aa:39:5b:a1:70:25:df:53:f1:bd:3d:a9:38:73:d5:71:
         ea:66:b5:19:94:b8:13:e9:dd:4a:93:db:f7:92:2a:1f:2d:aa:
         a2:57:12:11:bb:a2:8e:2d:9d:f0:4c:c3:3a:16:c6:04:8c:0b:
         18:3a:8b:da:04:de:e5:f8:c9:03:7f:f3:13:37:d3:22:87:3b:
         06:83:4b:c7
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUX39Q8lW3is4V6H5+huLtPlND4G4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgyZDExODdhOWUyYWQ0ZmRiNzQ0YTkyMGRkYzUxNWQx
MTQyN2E4MjAeFw0yMzAzMjcwNTE4NDZaFw0yMzAzMjgwODExNDZaMDMxMTAvBgNV
BAMTKEJBMjI2NDAwQTg0MkZFOTEwOTA4ODBCMzgzRDAyNjQzODAwNzQ4OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bBNrcYzAmJ3TvNc5gC8sDrh9
s4kqSrFYzDfS2tQv6d2lWfQuxf1qGFlmDCHcBJZQywLWSJz04hyUsKYXa8VVxSDg
PLlG7i9VyP7rTGqoeHaynCHWPQD3CEHyECDyfw0jvws8Lz/iU7+RcZxxQSiN6MVU
F1uv4XLicROrvCqHHUCSCrW5u8jF2oghINzTz+m/Uce9LaEMU3rx0FPZXc0TRs0H
FN+VIpynMqfb1rwQUeVC0ylin6lVZcgDz4K60m096+3hWCxHW+gVatE5v/OnXhf4
rz3U5AfoQ4EWLKrZDQVqWOQIG2kLzYLQo1CmiTqfQbee/RSk0ej05+xwPYRpAgMB
AAGjggH/MIIB+zAdBgNVHQ4EFgQUuiJkAKhC/pEJCICzg9AmQ4AHSJcwHwYDVR0j
BBgwFoAUOC0Rh6nirU/bdEqSDdxRXRFCeoIwDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIwOC8zODJEMTE4N0E5RTJBRDRGREI3NDRBOTIwRERDNTE1
RDExNDI3QTgyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvT0MwUmg2bmlyVV9i
ZEVxU0RkeFJYUkZDZW9JLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuG
YHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzIwOC8zODJEMTE4N0E5RTJBRDRGREI3NDRBOTIwRERDNTE1RDExNDI3QTgyLm1m
dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG
BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAJGbLFV/73D7BATreunB+kqE8mH/KRZxqW07jWJHmalS5g+G6ldSk
qm+3rA/E2GmrPUxOh6Nat/fWuOfEqOZ6Ykrxaf7ZIWy4+0hXAM28c3Je6TaAadQr
fTqXC8DY+Pe8buWOOqev9pePhH4YXpnywraQHx9qJh2PpaKuTNE0M+cdW8zUEd5R
QfqYi2pFm+Xqggf+x5/gnIOL1gbM3WRTuA5WX/QX9e5M6WQaP3IU6MXnDec6pTiq
OVuhcCXfU/G9Pak4c9Vx6ma1GZS4E+ndSpPb95IqHy2qolcSEbuiji2d8EzDOhbG
BIwLGDqL2gTe5fjJA3/zEzfTIoc7BoNLxw==
-----END CERTIFICATE-----