Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/219/6858A1C91FE320BD3FE18693C30EDDD7F72C23CA.mft
File:                     6858A1C91FE320BD3FE18693C30EDDD7F72C23CA.mft (raw, json)
Hash identifier:          kB97DHCudJl+y3roV5RAdr2HgygKUGGEv0nyrc0dCvM=
Subject key identifier:   3F:F3:C5:1A:62:BB:17:BE:96:F0:36:E8:A0:88:F9:24:F1:0B:7C:34
Authority key identifier: 68:58:A1:C9:1F:E3:20:BD:3F:E1:86:93:C3:0E:DD:D7:F7:2C:23:CA
Certificate issuer:       /CN=6858a1c91fe320bd3fe18693c30eddd7f72c23ca
Certificate serial:       7DDD597DC3E1CD66DE6E1145DE22961F1889AE79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFihyR_jIL0_4YaTww7d1_csI8o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/219/6858A1C91FE320BD3FE18693C30EDDD7F72C23CA.mft
Manifest number:          02A3
Signing time:             Mon 27 Mar 2023 03:18:37 +0000
Manifest this update:     Mon 27 Mar 2023 03:13:37 +0000
Manifest next update:     Tue 28 Mar 2023 05:56:37 +0000
Files and hashes:         1: 6858A1C91FE320BD3FE18693C30EDDD7F72C23CA.crl (hash: pz7b856hvc9RYOpUTfIV9S+RfcWD4pYlHEhN4hRZU4Y=)
                          2: 3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa (hash: mvoadaIsLAp0FcZdhDCEcKDRDKH5s7AH+Gw+A1Ffvds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:dd:59:7d:c3:e1:cd:66:de:6e:11:45:de:22:96:1f:18:89:ae:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6858a1c91fe320bd3fe18693c30eddd7f72c23ca
        Validity
            Not Before: Mar 27 03:13:37 2023 GMT
            Not After : Mar 28 05:56:37 2023 GMT
        Subject: CN=3FF3C51A62BB17BE96F036E8A088F924F10B7C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:a2:47:4d:2f:a6:2b:36:c2:8e:ca:1e:84:
                    3b:ee:95:83:44:44:35:6c:4a:f2:a0:c3:77:fc:f4:
                    10:2a:2f:7a:40:ca:4d:b9:90:66:08:99:9b:a1:aa:
                    f8:17:42:d2:d8:0f:2f:e1:c5:f1:32:47:55:e0:b1:
                    8b:ce:f3:32:f1:f0:6f:57:8c:19:e7:e2:65:6e:c4:
                    8f:10:92:00:e4:94:bb:40:ad:e0:77:51:3a:dc:c4:
                    16:46:d6:06:50:de:4c:e8:eb:e8:63:3e:5c:18:c8:
                    50:49:3b:39:5c:ff:93:02:bf:62:fa:78:25:58:88:
                    91:ca:5e:71:4b:bd:88:ab:89:91:2a:14:92:0d:50:
                    db:10:f9:6d:1e:a6:68:a7:41:26:91:c3:6a:bb:ce:
                    e1:fe:41:13:d1:4e:a6:ff:df:f8:e5:5e:d2:08:86:
                    99:dc:22:75:7b:da:f3:9d:cb:65:3c:e1:5b:3c:23:
                    63:91:4e:32:f5:45:4f:06:19:1e:6b:60:b9:d8:01:
                    26:e7:a9:bb:cb:32:8c:13:f6:25:92:d5:1b:98:9e:
                    c5:42:0f:c6:38:21:0d:80:ec:52:70:7e:33:e7:65:
                    5a:17:1b:1b:b0:9d:8a:ad:eb:8e:98:eb:a5:c8:55:
                    4e:a6:1d:4f:fc:e4:36:fb:c0:ad:0d:a1:0a:a9:76:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F3:C5:1A:62:BB:17:BE:96:F0:36:E8:A0:88:F9:24:F1:0B:7C:34
            X509v3 Authority Key Identifier:
                keyid:68:58:A1:C9:1F:E3:20:BD:3F:E1:86:93:C3:0E:DD:D7:F7:2C:23:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/219/6858A1C91FE320BD3FE18693C30EDDD7F72C23CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFihyR_jIL0_4YaTww7d1_csI8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/219/6858A1C91FE320BD3FE18693C30EDDD7F72C23CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a9:ef:0d:de:3c:7c:36:16:7a:9a:8a:6a:8e:4f:85:50:e1:
         04:8a:83:da:35:87:33:fa:86:1c:50:84:b0:44:37:2f:6f:56:
         f1:7c:1f:82:74:66:c0:ce:c3:b1:05:9b:e3:b7:94:67:bb:88:
         55:c6:87:85:7d:62:b6:f7:a0:fa:a3:59:a9:b6:98:c1:7c:32:
         56:20:27:27:61:35:40:1a:03:b7:7c:a9:d2:92:09:09:fc:a2:
         68:2c:04:63:7f:88:98:c7:34:52:7b:c3:5c:79:cf:27:5c:64:
         63:ab:b9:22:41:7d:9b:e7:1f:ab:4a:29:28:6e:27:7f:b4:85:
         34:48:7b:1a:79:a6:75:e1:56:7b:9f:62:63:23:3a:5d:aa:dc:
         72:fe:0d:99:92:c7:92:8f:93:d1:9d:e7:25:d3:21:bc:fd:89:
         38:f1:ca:1e:1e:1c:20:8f:2c:fa:b1:df:df:5e:e4:a7:71:48:
         e4:91:f7:3e:b7:8e:c6:c0:35:87:fe:e9:59:b1:9a:19:b0:9f:
         26:48:ba:5a:10:88:36:71:44:37:85:e0:8a:4c:42:dc:42:05:
         67:37:7c:70:49:15:17:59:9d:67:7a:2f:dd:4d:6a:d5:f9:a1:
         61:a8:18:b0:9e:38:21:9a:b9:24:c8:5c:bc:da:01:0e:b8:0a:
         c9:e9:29:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----