Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/22/2CFB8F14117D2EC7FA5F009F54BC6DC07E65F1D8.mft
File:                     2CFB8F14117D2EC7FA5F009F54BC6DC07E65F1D8.mft (raw, json)
Hash identifier:          lmKslLK0qOZiuTXVKaSVe31NMmSH2t6zFyzhlfd1RJI=
Subject key identifier:   57:3D:EF:A0:E4:37:7C:AD:FD:E9:CD:B1:A0:65:1F:86:FD:3F:33:62
Authority key identifier: 2C:FB:8F:14:11:7D:2E:C7:FA:5F:00:9F:54:BC:6D:C0:7E:65:F1:D8
Certificate issuer:       /CN=2cfb8f14117d2ec7fa5f009f54bc6dc07e65f1d8
Certificate serial:       020346712CBFD654CD080D2278738DBA8BB7C958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPuPFBF9Lsf6XwCfVLxtwH5l8dg.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/22/2CFB8F14117D2EC7FA5F009F54BC6DC07E65F1D8.mft
Manifest number:          8B
Signing time:             Tue 02 Mar 2021 19:18:00 +0000
Manifest this update:     Tue 02 Mar 2021 19:13:00 +0000
Manifest next update:     Wed 03 Mar 2021 19:18:00 +0000
Files and hashes:         1: 2CFB8F14117D2EC7FA5F009F54BC6DC07E65F1D8.crl (hash: 7GyUxj0iWHCBNIK2v5IygIv6Tr/Oo/WSU4RO7alfSug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:03:46:71:2c:bf:d6:54:cd:08:0d:22:78:73:8d:ba:8b:b7:c9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cfb8f14117d2ec7fa5f009f54bc6dc07e65f1d8
        Validity
            Not Before: Mar  2 19:13:00 2021 GMT
            Not After : Mar  9 19:18:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:9f:11:04:6d:db:c5:8c:bb:4d:70:f6:da:
                    bb:da:14:a2:f6:df:c4:72:46:e3:77:e0:5b:36:ea:
                    00:d3:d0:80:b3:36:80:21:0c:4d:19:4a:48:39:17:
                    7e:2d:34:61:e7:83:8f:2f:9e:c1:1b:36:97:a1:85:
                    f8:75:a6:5c:eb:a5:e9:04:96:41:37:ba:87:af:d5:
                    64:59:bf:aa:f6:1b:64:e7:3d:7e:ef:78:fd:68:ad:
                    a6:34:4a:a9:a9:68:1b:b8:e2:78:b0:91:31:c9:82:
                    a7:6e:60:00:2e:f1:3a:49:7d:f1:ad:85:66:79:67:
                    d1:bb:78:2b:2a:ec:f7:c3:cf:b2:47:75:58:d8:f0:
                    59:73:3a:01:28:24:66:17:df:44:d1:1e:25:85:1a:
                    07:4d:13:a3:5c:b5:7c:44:be:56:d6:46:37:93:1d:
                    75:e8:86:92:6d:9b:d7:93:65:3d:97:7f:46:ea:43:
                    ae:13:74:d9:bd:85:ad:39:08:03:cc:18:ae:2a:12:
                    32:4e:be:a8:ac:ef:5f:92:cb:e4:28:3a:7e:86:eb:
                    90:71:67:93:00:14:9e:11:e8:0f:4c:d6:0c:27:8e:
                    36:5f:b2:6e:90:e3:73:87:24:fd:76:59:12:2b:81:
                    fe:f3:1b:4d:a2:e6:d2:33:d2:dc:8f:15:61:5c:bd:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3D:EF:A0:E4:37:7C:AD:FD:E9:CD:B1:A0:65:1F:86:FD:3F:33:62
            X509v3 Authority Key Identifier:
                keyid:2C:FB:8F:14:11:7D:2E:C7:FA:5F:00:9F:54:BC:6D:C0:7E:65:F1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/22/2CFB8F14117D2EC7FA5F009F54BC6DC07E65F1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPuPFBF9Lsf6XwCfVLxtwH5l8dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/22/2CFB8F14117D2EC7FA5F009F54BC6DC07E65F1D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:80:eb:88:8a:9e:7c:39:a9:94:c4:1d:74:a8:40:bd:a7:8c:
         4a:50:ea:ab:9a:e7:ae:97:6e:0c:b9:7c:09:94:c9:35:cb:6b:
         c7:bb:a9:d4:ff:93:e6:b7:f7:36:0c:6f:b3:8b:e9:d6:14:2a:
         bb:9e:da:53:bb:68:6d:d0:89:fa:2f:64:51:af:1e:a8:8f:e7:
         72:5f:3b:65:15:ff:12:35:1c:e2:97:7f:48:47:b7:f4:33:2b:
         45:f1:03:8c:32:df:34:e2:e9:f0:e8:ba:11:c6:90:b2:d3:36:
         37:2e:d4:2f:0c:83:82:e3:ce:52:aa:9b:0e:84:40:e4:1c:51:
         2c:ae:f8:d3:ae:47:4e:c0:70:fb:42:35:2c:c2:7a:a8:84:76:
         c6:c3:57:66:6b:8e:89:44:e2:d2:49:53:f0:1e:54:25:3d:b2:
         36:48:cb:36:d5:09:dc:0b:d8:85:fe:10:18:3c:80:94:f3:91:
         31:b8:7c:b7:8e:fc:92:3d:56:8d:81:15:3e:64:33:f2:b8:48:
         35:d8:b1:4d:e2:8f:24:ab:64:e6:fc:04:4f:c8:03:15:65:a8:
         aa:d0:7f:b1:62:c6:f3:d3:c6:ec:9e:cd:25:2a:87:f3:eb:ea:
         f7:60:f4:b7:1d:a9:18:a9:4f:10:bd:ec:3e:f5:aa:2c:69:b5:
         e2:28:c4:e6
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUAgNGcSy/1lTNCA0ieHONuou3yVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmNmYjhmMTQxMTdkMmVjN2ZhNWYwMDlmNTRiYzZkYzA3
ZTY1ZjFkODAeFw0yMTAzMDIxOTEzMDBaFw0yMTAzMDkxOTE4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFFMTlGMTEwNDZEREJDNThD
QkI0RDcwRjZEQUJCREExNEEyRjZERkM0NzI0NkUzNzdFMDVCMzZFQTAwRDNEMDgw
QjMzNjgwMjEwQzREMTk0QTQ4MzkxNzdFMkQzNDYxRTc4MzhGMkY5RUMxMUIzNjk3
QTE4NUY4NzVBNjVDRUJBNUU5MDQ5NjQxMzdCQTg3QUZENTY0NTlCRkFBRjYxQjY0
RTczRDdFRUY3OEZENjhBREE2MzQ0QUE5QTk2ODFCQjhFMjc4QjA5MTMxQzk4MkE3
NkU2MDAwMkVGMTNBNDk3REYxQUQ4NTY2Nzk2N0QxQkI3ODJCMkFFQ0Y3QzNDRkIy
NDc3NTU4RDhGMDU5NzMzQTAxMjgyNDY2MTdERjQ0RDExRTI1ODUxQTA3NEQxM0Ez
NUNCNTdDNDRCRTU2RDY0NjM3OTMxRDc1RTg4NjkyNkQ5QkQ3OTM2NTNEOTc3RjQ2
RUE0M0FFMTM3NEQ5QkQ4NUFEMzkwODAzQ0MxOEFFMkExMjMyNEVCRUE4QUNFRjVG
OTJDQkU0MjgzQTdFODZFQjkwNzE2NzkzMDAxNDlFMTFFODBGNENENjBDMjc4RTM2
NUZCMjZFOTBFMzczODcyNEZENzY1OTEyMkI4MUZFRjMxQjREQTJFNkQyMzNEMkRD
OEYxNTYxNUNCRDUzRDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAweGfEQRt28WMu01w9tq72hSi9t/Eckbjd+BbNuoA09CAszaAIQxN
GUpIORd+LTRh54OPL57BGzaXoYX4daZc66XpBJZBN7qHr9VkWb+q9htk5z1+73j9
aK2mNEqpqWgbuOJ4sJExyYKnbmAALvE6SX3xrYVmeWfRu3grKuz3w8+yR3VY2PBZ
czoBKCRmF99E0R4lhRoHTROjXLV8RL5W1kY3kx116IaSbZvXk2U9l39G6kOuE3TZ
vYWtOQgDzBiuKhIyTr6orO9fksvkKDp+huuQcWeTABSeEegPTNYMJ442X7JukONz
hyT9dlkSK4H+8xtNoubSM9LcjxVhXL1T1QIDAQABo4IB/TCCAfkwHQYDVR0OBBYE
FFc976DkN3yt/enNsaBlH4b9PzNiMB8GA1UdIwQYMBaAFCz7jxQRfS7H+l8An1S8
bcB+ZfHYMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yMi8yQ0ZC
OEYxNDExN0QyRUM3RkE1RjAwOUY1NEJDNkRDMDdFNjVGMUQ4LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFB1UEZCRjlMc2Y2WHdDZlZMeHR3SDVsOGRnLmNlcjB7
BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzIyLzJDRkI4RjE0MTE3RDJFQzdG
QTVGMDA5RjU0QkM2REMwN0U2NUYxRDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAugOuIip58OamUxB10
qEC9p4xKUOqrmueul24MuXwJlMk1y2vHu6nU/5Pmt/c2DG+zi+nWFCq7ntpTu2ht
0In6L2RRrx6oj+dyXztlFf8SNRzil39IR7f0MytF8QOMMt804unw6LoRxpCy0zY3
LtQvDIOC485SqpsOhEDkHFEsrvjTrkdOwHD7QjUswnqohHbGw1dma46JROLSSVPw
HlQlPbI2SMs21QncC9iF/hAYPICU85ExuHy3jvySPVaNgRU+ZDPyuEg12LFN4o8k
q2Tm/ARPyAMVZaiq0H+xYsbz08bsns0lKofz6+r3YPS3HakYqU8Qvew+9aosabXi
KMTm
-----END CERTIFICATE-----