Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/214/CC86C6AE0C33C05C4269F012E226B6BC631150D0.mft
File:                     CC86C6AE0C33C05C4269F012E226B6BC631150D0.mft (raw, json)
Hash identifier:          B1AZsTdcmTjdGXXnLouUGI/+YbRK3N5TM6YVUP5l4LQ=
Subject key identifier:   88:D0:5F:09:6F:E0:63:B3:AE:87:4B:9D:FA:CB:C1:02:F7:DF:F8:FD
Authority key identifier: CC:86:C6:AE:0C:33:C0:5C:42:69:F0:12:E2:26:B6:BC:63:11:50:D0
Certificate issuer:       /CN=cc86c6ae0c33c05c4269f012e226b6bc631150d0
Certificate serial:       4081B9360D89AFE299EA787A55E3CC0418E30F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zIbGrgwzwFxCafAS4ia2vGMRUNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/214/CC86C6AE0C33C05C4269F012E226B6BC631150D0.mft
Manifest number:          02EB
Signing time:             Mon 27 Mar 2023 04:26:23 +0000
Manifest this update:     Mon 27 Mar 2023 04:21:23 +0000
Manifest next update:     Tue 28 Mar 2023 07:34:23 +0000
Files and hashes:         1: CC86C6AE0C33C05C4269F012E226B6BC631150D0.crl (hash: +TM3PgJsAIciTjb9X6N2OUp6yELubLFy6oBa/TiChL4=)
                          2: 38302e37312e3134382e302f32342d3234203d3e20323031333431.roa (hash: hq677BQaYrci0M3jQO5CwKC/enJeMWKWFcBK9m48Rfs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:81:b9:36:0d:89:af:e2:99:ea:78:7a:55:e3:cc:04:18:e3:0f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc86c6ae0c33c05c4269f012e226b6bc631150d0
        Validity
            Not Before: Mar 27 04:21:23 2023 GMT
            Not After : Mar 28 07:34:23 2023 GMT
        Subject: CN=88D05F096FE063B3AE874B9DFACBC102F7DFF8FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:32:1a:38:df:7a:9c:68:af:d6:8d:53:01:97:
                    fc:07:32:06:23:b3:5d:cd:e4:3f:87:a1:4c:1c:8b:
                    0d:98:ff:d2:ae:36:d2:f3:05:7c:4d:09:1b:6c:b9:
                    82:4e:14:f9:dd:23:98:44:ee:59:2d:df:07:9f:f9:
                    b2:d3:4e:f7:4b:60:f6:c8:b7:96:fe:ee:55:93:95:
                    b2:2d:87:1e:37:07:ac:50:23:61:0e:aa:4f:0f:21:
                    31:3e:e1:85:86:63:3b:73:0f:31:cf:55:44:03:5d:
                    4d:b7:fc:9a:ee:59:76:aa:77:4c:95:78:a1:64:88:
                    41:70:a1:5f:73:35:f3:2a:44:6f:44:c1:fc:5e:85:
                    d1:1c:9e:39:9c:c8:9b:cc:14:2b:ec:4f:bd:93:d8:
                    4e:db:79:18:6d:4d:a5:34:0d:16:7c:94:41:ab:d9:
                    47:bd:a5:b9:f4:e4:92:bd:99:80:dc:07:2a:06:5b:
                    6f:11:c9:31:b8:9e:19:ed:d5:32:2b:69:45:16:4f:
                    1e:60:ba:4c:c2:58:dd:0f:0f:b1:89:3d:cb:08:df:
                    3a:fe:9d:6d:9c:3e:69:49:ce:c4:bf:07:aa:21:2c:
                    d0:82:f2:b1:3d:9d:79:0b:ad:d3:41:ce:ab:99:bb:
                    8c:0f:17:74:03:cc:80:13:bc:28:e7:f0:d6:6e:41:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D0:5F:09:6F:E0:63:B3:AE:87:4B:9D:FA:CB:C1:02:F7:DF:F8:FD
            X509v3 Authority Key Identifier:
                keyid:CC:86:C6:AE:0C:33:C0:5C:42:69:F0:12:E2:26:B6:BC:63:11:50:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/214/CC86C6AE0C33C05C4269F012E226B6BC631150D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIbGrgwzwFxCafAS4ia2vGMRUNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/214/CC86C6AE0C33C05C4269F012E226B6BC631150D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bb:28:7b:38:6f:cf:81:ff:65:fe:37:7f:47:c0:9e:38:66:
         b9:44:d5:95:5d:16:42:47:b0:36:27:ae:75:1b:53:58:0c:6e:
         dc:ed:25:d5:f2:19:58:6f:a9:30:11:a5:e4:24:3b:f5:46:d0:
         d9:46:2f:ff:75:94:82:19:f2:8a:ef:cb:ee:01:e6:8f:bd:26:
         fb:b2:60:f7:40:6b:17:22:91:0e:4e:72:44:00:0e:15:a2:80:
         aa:ad:e3:ac:92:bc:ed:99:fb:9a:73:c4:dd:e5:ac:c5:82:67:
         86:6a:a5:13:dc:ff:1f:9e:30:a8:a6:27:37:b2:14:92:06:bf:
         f0:7c:65:e8:48:3f:14:d4:b3:ff:7d:64:01:cf:ff:78:65:b1:
         3f:f2:8a:76:93:48:92:30:dd:23:80:c5:b3:33:c2:8a:15:12:
         6e:d2:a1:c4:78:39:a8:39:44:73:bb:bc:1d:91:5a:1f:dd:f0:
         40:e7:37:7b:92:a4:04:7f:d3:39:7e:55:bb:4c:cc:cc:de:27:
         d3:84:a1:c4:1f:a0:b2:81:03:28:b3:4e:bd:d9:36:51:ce:13:
         5a:35:e8:ed:48:70:bc:a8:a0:b6:db:8d:26:0d:24:e9:19:91:
         46:67:e4:4f:1d:00:e1:b2:76:ca:d2:7a:2a:5b:9d:bc:ad:75:
         63:80:f9:db
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUQIG5Ng2Jr+KZ6nh6VePMBBjjD0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2M4NmM2YWUwYzMzYzA1YzQyNjlmMDEyZTIyNmI2YmM2
MzExNTBkMDAeFw0yMzAzMjcwNDIxMjNaFw0yMzAzMjgwNzM0MjNaMDMxMTAvBgNV
BAMTKDg4RDA1RjA5NkZFMDYzQjNBRTg3NEI5REZBQ0JDMTAyRjdERkY4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpMho433qcaK/WjVMBl/wHMgYj
s13N5D+HoUwciw2Y/9KuNtLzBXxNCRtsuYJOFPndI5hE7lkt3wef+bLTTvdLYPbI
t5b+7lWTlbIthx43B6xQI2EOqk8PITE+4YWGYztzDzHPVUQDXU23/JruWXaqd0yV
eKFkiEFwoV9zNfMqRG9EwfxehdEcnjmcyJvMFCvsT72T2E7beRhtTaU0DRZ8lEGr
2Ue9pbn05JK9mYDcByoGW28RyTG4nhnt1TIraUUWTx5gukzCWN0PD7GJPcsI3zr+
nW2cPmlJzsS/B6ohLNCC8rE9nXkLrdNBzquZu4wPF3QDzIATvCjn8NZuQSttAgMB
AAGjggH/MIIB+zAdBgNVHQ4EFgQUiNBfCW/gY7Ouh0ud+svBAvff+P0wHwYDVR0j
BBgwFoAUzIbGrgwzwFxCafAS4ia2vGMRUNAwDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIxNC9DQzg2QzZBRTBDMzNDMDVDNDI2OUYwMTJFMjI2QjZC
QzYzMTE1MEQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvekliR3Jnd3p3RnhD
YWZBUzRpYTJ2R01SVU5BLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuG
YHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzIxNC9DQzg2QzZBRTBDMzNDMDVDNDI2OUYwMTJFMjI2QjZCQzYzMTE1MEQwLm1m
dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG
BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAbLsoezhvz4H/Zf43f0fAnjhmuUTVlV0WQkewNieudRtTWAxu3O0l
1fIZWG+pMBGl5CQ79UbQ2UYv/3WUghnyiu/L7gHmj70m+7Jg90BrFyKRDk5yRAAO
FaKAqq3jrJK87Zn7mnPE3eWsxYJnhmqlE9z/H54wqKYnN7IUkga/8Hxl6Eg/FNSz
/31kAc//eGWxP/KKdpNIkjDdI4DFszPCihUSbtKhxHg5qDlEc7u8HZFaH93wQOc3
e5KkBH/TOX5Vu0zMzN4n04ShxB+gsoEDKLNOvdk2Uc4TWjXo7UhwvKigttuNJg0k
6RmRRmfkTx0A4bJ2ytJ6KludvK11Y4D52w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net