Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/23/FF23DB3C0C1DBC3119B0C776A5C6F7C30AFAC71E.mft
File:                     FF23DB3C0C1DBC3119B0C776A5C6F7C30AFAC71E.mft (raw, json)
Hash identifier:          ckAVID5xeQI0AXi/RLQLF/r2hDwLdIZrHK2CiVYwgfw=
Subject key identifier:   28:D0:A8:C6:AD:AD:04:63:C4:81:5F:38:F7:C6:E0:92:A8:87:D7:E5
Authority key identifier: FF:23:DB:3C:0C:1D:BC:31:19:B0:C7:76:A5:C6:F7:C3:0A:FA:C7:1E
Certificate issuer:       /CN=ff23db3c0c1dbc3119b0c776a5c6f7c30afac71e
Certificate serial:       443CB36C49DA0D999D0791B40F956438F7738610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_yPbPAwdvDEZsMd2pcb3wwr6xx4.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/23/FF23DB3C0C1DBC3119B0C776A5C6F7C30AFAC71E.mft
Manifest number:          8B
Signing time:             Tue 02 Mar 2021 19:12:00 +0000
Manifest this update:     Tue 02 Mar 2021 19:07:00 +0000
Manifest next update:     Wed 03 Mar 2021 19:12:00 +0000
Files and hashes:         1: FF23DB3C0C1DBC3119B0C776A5C6F7C30AFAC71E.crl (hash: X+JJHfJxoFiY9PKAARKkc5vFzO5T16LSt+13eNYWulU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3c:b3:6c:49:da:0d:99:9d:07:91:b4:0f:95:64:38:f7:73:86:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff23db3c0c1dbc3119b0c776a5c6f7c30afac71e
        Validity
            Not Before: Mar  2 19:07:00 2021 GMT
            Not After : Mar  9 19:12:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0b:f7:ce:68:43:ac:68:f5:17:77:80:82:7e:
                    ef:4a:fc:33:c5:e0:53:33:ce:59:e2:5e:05:c5:9e:
                    b3:b7:15:c5:26:c3:fb:a9:dc:52:4b:c0:76:de:76:
                    aa:e0:a6:dc:5a:b8:97:6f:6f:83:23:c2:6a:72:4a:
                    de:9e:3b:a8:72:a7:70:df:00:53:61:48:d3:52:73:
                    99:a7:df:d9:ea:cf:9e:77:f9:53:99:b8:b1:95:af:
                    5b:4f:97:ff:60:59:0c:81:75:a2:e5:31:d7:1e:7c:
                    dc:ba:a7:fa:71:b0:5a:2e:89:6d:36:ac:e4:9b:c3:
                    6e:44:9d:97:63:a4:a8:c9:6b:d7:a7:cc:7f:19:6a:
                    b2:8a:f6:aa:1f:87:22:5f:10:ff:bf:a5:2c:d2:94:
                    47:af:52:5b:fb:47:b6:6c:a8:64:67:a6:60:be:f5:
                    fe:dd:be:d1:ed:fa:65:91:49:d4:a4:b6:0c:e1:b1:
                    cc:70:a9:e2:56:c2:67:5e:75:05:1b:bd:62:5c:53:
                    36:1c:a3:37:6f:57:42:be:0a:16:88:e7:ed:25:de:
                    39:42:5d:d5:c2:3e:7e:ae:d0:ae:26:54:6f:79:74:
                    22:a8:17:07:b9:53:2a:97:ed:c0:ba:52:46:bf:ef:
                    9e:87:1b:55:17:6d:ed:88:fb:ca:57:aa:32:7e:c8:
                    be:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D0:A8:C6:AD:AD:04:63:C4:81:5F:38:F7:C6:E0:92:A8:87:D7:E5
            X509v3 Authority Key Identifier:
                keyid:FF:23:DB:3C:0C:1D:BC:31:19:B0:C7:76:A5:C6:F7:C3:0A:FA:C7:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/23/FF23DB3C0C1DBC3119B0C776A5C6F7C30AFAC71E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yPbPAwdvDEZsMd2pcb3wwr6xx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/23/FF23DB3C0C1DBC3119B0C776A5C6F7C30AFAC71E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:6d:ba:e1:52:d4:22:0c:21:67:5d:ff:39:98:84:36:e3:
         6d:61:76:e5:6c:a8:a8:e8:53:30:01:13:85:1d:ce:dd:76:20:
         07:be:1b:1c:21:40:8c:69:f4:cc:ac:c6:84:98:3e:4a:e3:07:
         1d:62:8a:f6:ba:7a:e3:22:59:90:10:9b:e1:a5:1d:24:d0:5b:
         d2:f8:fa:4e:dd:35:9d:24:9b:8e:da:3d:7f:8d:9a:c5:dd:a1:
         e9:ff:57:ef:4b:9a:63:38:81:26:32:f1:6b:ae:db:0d:3f:8d:
         34:4f:a6:c5:44:b1:1e:b7:0d:e4:ba:a7:89:7c:5f:d0:8a:91:
         d5:1d:40:37:5d:f3:54:6c:c0:7f:62:58:5a:16:79:59:7f:ca:
         48:df:52:eb:6c:4e:b4:7d:58:4a:dc:39:5e:e1:86:86:14:94:
         b3:39:9e:1a:33:28:65:d5:74:6b:3e:cc:a9:af:3f:a2:85:30:
         b6:08:54:5f:be:a5:90:3e:0c:f7:2c:0c:9d:f8:43:00:43:35:
         a2:02:81:a2:09:ab:63:e1:86:a4:46:1d:2a:17:ab:19:7d:42:
         1c:58:c7:3d:e7:ed:7c:b1:21:a2:8f:9b:75:fc:23:f7:40:5c:
         d5:4d:32:d2:2d:cf:02:46:45:76:bf:18:bd:ca:2c:98:9f:87:
         f4:0a:45:ef
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIURDyzbEnaDZmdB5G0D5VkOPdzhhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmYyM2RiM2MwYzFkYmMzMTE5YjBjNzc2YTVjNmY3YzMw
YWZhYzcxZTAeFw0yMTAzMDIxOTA3MDBaFw0yMTAzMDkxOTEyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUIwQkY3Q0U2ODQzQUM2OEY1
MTc3NzgwODI3RUVGNEFGQzMzQzVFMDUzMzNDRTU5RTI1RTA1QzU5RUIzQjcxNUM1
MjZDM0ZCQTlEQzUyNEJDMDc2REU3NkFBRTBBNkRDNUFCODk3NkY2RjgzMjNDMjZB
NzI0QURFOUUzQkE4NzJBNzcwREYwMDUzNjE0OEQzNTI3Mzk5QTdERkQ5RUFDRjlF
NzdGOTUzOTlCOEIxOTVBRjVCNEY5N0ZGNjA1OTBDODE3NUEyRTUzMUQ3MUU3Q0RD
QkFBN0ZBNzFCMDVBMkU4OTZEMzZBQ0U0OUJDMzZFNDQ5RDk3NjNBNEE4Qzk2QkQ3
QTdDQzdGMTk2QUIyOEFGNkFBMUY4NzIyNUYxMEZGQkZBNTJDRDI5NDQ3QUY1MjVC
RkI0N0I2NkNBODY0NjdBNjYwQkVGNUZFRERCRUQxRURGQTY1OTE0OUQ0QTRCNjBD
RTFCMUNDNzBBOUUyNTZDMjY3NUU3NTA1MUJCRDYyNUM1MzM2MUNBMzM3NkY1NzQy
QkUwQTE2ODhFN0VEMjVERTM5NDI1REQ1QzIzRTdFQUVEMEFFMjY1NDZGNzk3NDIy
QTgxNzA3Qjk1MzJBOTdFREMwQkE1MjQ2QkZFRjlFODcxQjU1MTc2REVEODhGQkNB
NTdBQTMyN0VDOEJFNzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6wv3zmhDrGj1F3eAgn7vSvwzxeBTM85Z4l4FxZ6ztxXFJsP7qdxS
S8B23naq4KbcWriXb2+DI8Jqckrenjuocqdw3wBTYUjTUnOZp9/Z6s+ed/lTmbix
la9bT5f/YFkMgXWi5THXHnzcuqf6cbBaLoltNqzkm8NuRJ2XY6SoyWvXp8x/GWqy
ivaqH4ciXxD/v6Us0pRHr1Jb+0e2bKhkZ6ZgvvX+3b7R7fplkUnUpLYM4bHMcKni
VsJnXnUFG71iXFM2HKM3b1dCvgoWiOftJd45Ql3Vwj5+rtCuJlRveXQiqBcHuVMq
l+3AulJGv++ehxtVF23tiPvKV6oyfsi+dwIDAQABo4IB/TCCAfkwHQYDVR0OBBYE
FCjQqMatrQRjxIFfOPfG4JKoh9flMB8GA1UdIwQYMBaAFP8j2zwMHbwxGbDHdqXG
98MK+sceMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yMy9GRjIz
REIzQzBDMURCQzMxMTlCMEM3NzZBNUM2RjdDMzBBRkFDNzFFLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lQYlBBd2R2REVac01kMnBjYjN3d3I2eHg0LmNlcjB7
BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzIzL0ZGMjNEQjNDMEMxREJDMzEx
OUIwQzc3NkE1QzZGN0MzMEFGQUM3MUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlj2264VLUIgwhZ13/
OZiENuNtYXblbKio6FMwAROFHc7ddiAHvhscIUCMafTMrMaEmD5K4wcdYor2unrj
IlmQEJvhpR0k0FvS+PpO3TWdJJuO2j1/jZrF3aHp/1fvS5pjOIEmMvFrrtsNP400
T6bFRLEetw3kuqeJfF/QipHVHUA3XfNUbMB/YlhaFnlZf8pI31LrbE60fVhK3Dle
4YaGFJSzOZ4aMyhl1XRrPsyprz+ihTC2CFRfvqWQPgz3LAyd+EMAQzWiAoGiCatj
4YakRh0qF6sZfUIcWMc95+18sSGij5t1/CP3QFzVTTLSLc8CRkV2vxi9yiyYn4f0
CkXv
-----END CERTIFICATE-----