Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/217/69F3D2939CAC8784AA831E0F3D81B5D0D4980C78.mft
File:                     69F3D2939CAC8784AA831E0F3D81B5D0D4980C78.mft (raw, json)
Hash identifier:          KuzKd1s8TMwSx8+2sNgevvs3hiZsAvplr9F2aSP0wCs=
Subject key identifier:   F0:7F:A8:CA:A0:DD:42:1E:10:3C:EF:BF:5E:D6:2F:51:4A:4F:1C:B3
Authority key identifier: 69:F3:D2:93:9C:AC:87:84:AA:83:1E:0F:3D:81:B5:D0:D4:98:0C:78
Certificate issuer:       /CN=69f3d2939cac8784aa831e0f3d81b5d0d4980c78
Certificate serial:       627C8E3B4B4C398479A99A40A797683ED88500BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afPSk5ysh4Sqgx4PPYG10NSYDHg.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/217/69F3D2939CAC8784AA831E0F3D81B5D0D4980C78.mft
Manifest number:          02EB
Signing time:             Mon 27 Mar 2023 06:57:35 +0000
Manifest this update:     Mon 27 Mar 2023 06:52:35 +0000
Manifest next update:     Tue 28 Mar 2023 10:07:35 +0000
Files and hashes:         1: 69F3D2939CAC8784AA831E0F3D81B5D0D4980C78.crl (hash: PkURn0wZb7oSXQ42wHWyCeIiwJmP/9M43l2Yp2jGd/A=)
                          2: 36322e332e34352e302f32342d3234203d3e20323031333431.roa (hash: XIBVJnB+MDifQb0eDZqhDWKc4U5BmcfahGORcMNH0Yg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7c:8e:3b:4b:4c:39:84:79:a9:9a:40:a7:97:68:3e:d8:85:00:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f3d2939cac8784aa831e0f3d81b5d0d4980c78
        Validity
            Not Before: Mar 27 06:52:35 2023 GMT
            Not After : Mar 28 10:07:35 2023 GMT
        Subject: CN=F07FA8CAA0DD421E103CEFBF5ED62F514A4F1CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:ac:bf:b6:3c:0e:de:67:db:75:d8:bc:34:
                    a2:20:73:5f:9f:be:c2:35:c5:36:cd:7c:16:e5:f0:
                    eb:1b:75:3d:27:d9:6a:b4:ec:b2:68:b7:88:43:12:
                    19:2c:43:33:f1:16:0c:1e:ed:5d:19:e1:d8:c0:43:
                    52:7f:90:29:16:e2:c1:62:97:fc:5d:fa:99:b0:64:
                    18:0d:71:a1:c2:16:ad:32:b5:c6:95:e3:40:0d:78:
                    80:2b:50:56:a2:93:cf:fc:af:6b:4e:d3:dc:d4:44:
                    11:47:45:50:4c:dc:14:6d:c2:30:37:bc:7d:27:82:
                    cd:ee:62:f9:f3:07:e1:71:d4:ac:3b:cb:8d:e7:e7:
                    3a:e7:c2:83:f3:8f:78:af:07:cc:13:35:0b:31:be:
                    aa:5c:0a:72:4a:8d:d4:0b:cf:1b:d4:18:aa:77:6e:
                    bb:75:19:ee:21:b3:fc:51:56:9e:e2:8d:06:c6:e3:
                    78:6d:a5:db:22:a5:d9:bb:59:15:65:a6:69:4c:62:
                    85:56:d3:ed:19:e3:f9:ad:78:a6:b0:0a:9b:de:1e:
                    17:f6:95:d6:b8:0b:ed:a5:1e:6d:6f:c7:77:0a:ea:
                    e2:f7:de:52:2c:21:5a:39:16:17:ed:f8:f9:c7:19:
                    69:a9:ff:d0:44:4a:67:bb:3b:f0:2b:aa:1c:c7:0b:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7F:A8:CA:A0:DD:42:1E:10:3C:EF:BF:5E:D6:2F:51:4A:4F:1C:B3
            X509v3 Authority Key Identifier:
                keyid:69:F3:D2:93:9C:AC:87:84:AA:83:1E:0F:3D:81:B5:D0:D4:98:0C:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/217/69F3D2939CAC8784AA831E0F3D81B5D0D4980C78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afPSk5ysh4Sqgx4PPYG10NSYDHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/217/69F3D2939CAC8784AA831E0F3D81B5D0D4980C78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:95:40:80:1f:86:51:b8:de:5b:ca:36:b0:3d:da:fd:1a:
         6e:4d:57:a9:fb:c0:fd:0b:9e:9e:9b:e8:4d:d9:74:7d:90:67:
         83:a7:b4:b4:75:3b:9f:19:d3:b1:89:84:c6:90:b7:10:ef:cf:
         93:6c:1a:b6:52:78:09:cd:03:1b:2b:af:80:f0:ad:9c:e2:81:
         fe:a8:a1:c4:d1:6a:17:ca:8a:4d:64:5e:ec:67:e3:78:6b:16:
         2b:5d:dc:3b:22:e3:a4:4f:a4:0e:75:6e:8b:46:81:3b:2a:fa:
         3e:dd:36:8e:c4:c7:8c:85:9f:3d:f9:46:1b:0f:7b:63:11:df:
         ae:ec:5b:a9:d5:22:95:4b:13:f4:59:1d:9e:e6:ae:0e:5b:f3:
         c6:72:77:33:04:ae:d0:2d:ab:52:aa:9c:37:b4:11:05:66:ab:
         70:44:52:65:7c:8f:ef:78:ea:75:72:fb:fb:6c:1a:55:34:1a:
         2d:b8:f3:ed:57:c1:49:4f:d5:bf:61:ac:96:92:1d:c7:6e:43:
         66:7d:2e:22:6c:94:f3:e2:f3:10:1c:cc:45:24:24:15:1f:16:
         49:49:8a:5a:89:05:38:70:d2:c9:06:fa:7a:5d:c1:3b:c6:8a:
         f0:1e:c1:dd:95:03:3e:97:d3:f5:bb:38:40:8a:5d:ff:43:50:
         56:8a:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----