Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/218/7BCA4DA732CA1E47104872840269C9F17C9DD5F2.mft
File:                     7BCA4DA732CA1E47104872840269C9F17C9DD5F2.mft (raw, json)
Hash identifier:          0wERf6gKETxvCtjnmyx60R7EpLhuoBQ0KuHNQTrdRyE=
Subject key identifier:   9E:DB:BF:29:AA:73:1C:3C:82:82:41:B1:F5:FD:AB:05:57:94:61:63
Authority key identifier: 7B:CA:4D:A7:32:CA:1E:47:10:48:72:84:02:69:C9:F1:7C:9D:D5:F2
Certificate issuer:       /CN=7bca4da732ca1e47104872840269c9f17c9dd5f2
Certificate serial:       4138D81A64F77AA59DE90350856C7FF344D78954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8pNpzLKHkcQSHKEAmnJ8Xyd1fI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/218/7BCA4DA732CA1E47104872840269C9F17C9DD5F2.mft
Manifest number:          02A2
Signing time:             Mon 27 Mar 2023 03:08:12 +0000
Manifest this update:     Mon 27 Mar 2023 03:03:12 +0000
Manifest next update:     Tue 28 Mar 2023 05:54:12 +0000
Files and hashes:         1: 3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa (hash: FQLI9YMhiqiMV0AmH3kzd8TEDWJ8SEKUvXS+iwf25sE=)
                          2: 7BCA4DA732CA1E47104872840269C9F17C9DD5F2.crl (hash: MzJrKW57AcqEmF2r56cdJmXBDaWrHmtMjRhBGwwbf6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:38:d8:1a:64:f7:7a:a5:9d:e9:03:50:85:6c:7f:f3:44:d7:89:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bca4da732ca1e47104872840269c9f17c9dd5f2
        Validity
            Not Before: Mar 27 03:03:12 2023 GMT
            Not After : Mar 28 05:54:12 2023 GMT
        Subject: CN=9EDBBF29AA731C3C828241B1F5FDAB0557946163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:17:31:b9:df:56:74:82:9d:b2:13:6a:fa:
                    ec:ba:c9:4c:1d:a2:5a:65:40:e3:b5:04:86:47:39:
                    d8:06:8f:db:d6:90:73:dc:be:95:a2:f3:f6:4c:7c:
                    b6:f2:7f:fc:8e:5b:17:2e:95:85:4a:09:b3:0b:77:
                    1a:f4:54:79:23:3a:61:e1:0b:69:f8:a4:fe:b4:b8:
                    a4:00:3c:dd:0d:05:ee:59:c7:9b:cf:98:be:5e:d0:
                    e6:ec:4f:5b:0b:a8:86:cf:b0:eb:28:2f:08:b7:e8:
                    75:b8:61:dc:95:14:93:df:e8:1a:ba:c2:03:dd:13:
                    29:c2:7c:22:87:e6:10:78:75:d8:d2:f9:43:d3:f8:
                    61:01:c6:83:21:b2:41:21:63:ea:4a:dd:a7:31:cb:
                    5c:39:a6:ea:35:1e:be:71:7c:df:41:f5:b7:0c:06:
                    c8:38:9a:ba:76:4a:de:68:2e:c3:ef:94:e7:6d:0a:
                    04:90:13:f5:86:e1:0a:fa:c0:5f:12:31:a4:be:6a:
                    0a:81:34:4c:d5:75:72:4e:be:3b:ca:3e:c6:c5:59:
                    64:5d:12:bf:93:be:f7:45:64:b3:2d:31:f2:89:f5:
                    ab:51:a5:26:70:2b:f5:5f:5e:dc:d6:1c:11:51:11:
                    3e:bc:a4:1e:b7:a2:3b:31:a0:0f:4c:59:6d:4a:ff:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DB:BF:29:AA:73:1C:3C:82:82:41:B1:F5:FD:AB:05:57:94:61:63
            X509v3 Authority Key Identifier:
                keyid:7B:CA:4D:A7:32:CA:1E:47:10:48:72:84:02:69:C9:F1:7C:9D:D5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/218/7BCA4DA732CA1E47104872840269C9F17C9DD5F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8pNpzLKHkcQSHKEAmnJ8Xyd1fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/218/7BCA4DA732CA1E47104872840269C9F17C9DD5F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f5:35:f2:14:af:84:3e:79:19:b1:a2:fd:7d:23:ce:47:3a:
         15:c5:47:e4:6d:3b:24:33:89:ce:13:c4:26:e6:0e:eb:55:63:
         bc:bc:4f:29:88:72:91:a2:b8:57:07:d4:68:c0:e5:4d:3d:f2:
         22:cb:3a:98:9c:a8:e3:fa:80:21:e5:8e:37:09:a1:af:94:6a:
         b2:23:a6:d3:c5:b4:bc:42:9e:20:83:9d:5e:95:ff:07:b9:04:
         24:fb:fa:14:68:b0:ba:55:9a:71:3e:95:a1:80:cb:c8:f9:ff:
         7f:de:3f:98:6f:58:4a:0f:c2:42:2c:56:aa:19:0a:55:08:42:
         24:9c:9d:46:7c:25:1d:c4:b9:7d:25:50:26:fe:e9:91:04:fc:
         27:89:4d:8a:76:d7:3c:4d:0c:ad:56:cf:af:9e:56:0a:fa:3d:
         11:7c:56:ec:e4:32:b4:44:6f:f9:4d:43:8b:bb:0c:60:67:fd:
         43:10:26:f5:b8:e1:d5:32:f0:d2:66:e8:d4:17:80:ca:95:d2:
         8d:73:6a:6d:7a:40:2d:c5:5f:ca:40:b6:84:e9:3f:97:a8:03:
         ee:7d:5d:cf:ca:c8:24:90:c5:37:d0:59:e0:b5:43:12:04:f4:
         2c:c5:3b:90:de:ab:dc:82:ad:15:95:ee:94:0a:0d:0c:04:76:
         5e:07:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----