Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.mft
File:                     852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.mft (raw, json)
Hash identifier:          7c4xvqWNUqF5JwWQGqiFMFa3KvHOGmGCTp6w2rqz6xQ=
Subject key identifier:   F9:2E:85:49:53:78:59:63:7B:EB:AE:B2:10:1A:CC:B0:EE:27:BA:8C
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Certificate issuer:       /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial:       04F7998F280533D83386AAE8E8697A898E757937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.mft
Manifest number:          98
Signing time:             Tue 02 Mar 2021 17:56:02 +0000
Manifest this update:     Tue 02 Mar 2021 17:51:02 +0000
Manifest next update:     Wed 03 Mar 2021 17:56:02 +0000
Files and hashes:         1: 34352e36372e3232322e302f32342d3234203d3e20323132373335.roa (hash: MgdX6DpByS4nkqKeRGFQh68BuX87Dk9bR9LrCWGcdWI=)
                          2: 34352e36372e3232302e302f32342d3234203d3e20323132303837.roa (hash: aWaRqpJCICooDja7OpFu5WarBQtYP6E4lrzjm0Azzn8=)
                          3: 34352e36372e3232302e302f32342d3234203d3e20323132373335.roa (hash: YJ2KeTYFQsUI5apaSfsZn2krRHPi9sogyhHDGrkPB/8=)
                          4: 34352e36372e3232322e302f32342d3234203d3e20323132303837.roa (hash: uce/88ZPnGSENkPwoJu/A/Bf1q6aKQLBxjHNwlhFy3U=)
                          5: 852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl (hash: KooyJKYPSY86D/AYFGiHw1UaN6MGf5Y+1s2+WuVnX4o=)
                          6: 34352e36372e3232302e302f32342d3234203d3e20323035383134.roa (hash: gfl21as/wHi/oBPlphb+SoQwu3s7dPvL4LyPrGBTYjQ=)
                          7: 34352e36372e3232302e302f32332d3234203d3e203631333137.roa (hash: ZZzZd55PWoyGXd7oWC5BYLRsKp4m2Lk2ejGJTKlvYsI=)
                          8: 34352e36372e3232312e302f32342d3234203d3e20323037373837.roa (hash: KlFmQN16bna8NHCegrrUbod9UFsyMdNLrzR2A08ey0c=)
                          9: 34352e36372e3232302e302f32342d3234203d3e20323132333430.roa (hash: H9lfLTaoxPc3ACoqVNcwNd3risne6D1bWAJXL/rwAg8=)
                          10: 34352e36372e3232322e302f32342d3234203d3e20323035383134.roa (hash: Dk6z0ViFQhxgscNTYttJPRwHIS7S5er9/DoCPa2zi3o=)
                          11: 34352e36372e3232322e302f32342d3234203d3e20323132333430.roa (hash: 0jfXryGRKEJR3t3CNy4tWzhUn9zlTiPf6sNxN/iZ2Fg=)
                          12: 34352e36372e3232312e302f32342d3234203d3e20323132373836.roa (hash: ufqb+t0DDwVXJUUt2ltF17vEpoHx997xoyEi9oXVfPY=)
                          13: 34352e36372e3232322e302f32342d3234203d3e203631333137.roa (hash: kJDPuYJo9X8y3JtSzkaHJECmTp/LMGcm6benPv6uFXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f7:99:8f:28:05:33:d8:33:86:aa:e8:e8:69:7a:89:8e:75:79:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
        Validity
            Not Before: Mar  2 17:51:02 2021 GMT
            Not After : Mar  9 17:56:02 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:f8:77:3e:6c:8f:48:94:ec:80:12:14:3e:
                    4d:97:d8:7e:96:a2:c1:b7:b0:b8:38:fe:aa:c4:68:
                    5d:72:8e:1e:c7:13:1a:53:42:01:c2:23:e6:07:9b:
                    c0:6c:04:d0:67:31:38:59:28:6a:2f:3b:aa:5e:49:
                    62:87:df:1c:a9:3e:65:30:b5:a5:26:11:f2:61:5a:
                    ed:2e:c1:ab:4e:07:b8:e4:9e:c4:c6:d5:08:f5:58:
                    e2:d9:4a:11:d4:e9:45:27:22:b5:16:a5:ae:a3:90:
                    ae:c1:e7:e8:89:51:c8:ce:a2:0e:9d:a6:c5:29:61:
                    7b:2f:73:76:78:a0:5d:b9:dd:9d:0f:0d:46:e5:fe:
                    31:83:66:84:4b:0c:d2:e3:8c:e6:75:b6:ef:7b:81:
                    39:cf:a6:50:81:4d:c1:54:ef:5d:4d:1b:56:44:3c:
                    a4:46:72:ba:7d:0d:c3:0e:ce:07:9c:fd:10:59:f8:
                    64:b9:e1:2b:08:bf:f0:39:23:8a:61:e1:7f:11:dc:
                    7f:c7:4c:f4:8b:fb:c5:f3:c0:1a:f0:5e:dd:56:9f:
                    fd:4b:0f:4d:ec:2b:7d:df:44:24:98:f4:42:b3:db:
                    eb:3c:01:14:5a:ec:b7:78:33:50:e4:1a:53:23:17:
                    34:0c:c0:34:2e:db:7d:22:d2:07:1f:d6:7d:08:c5:
                    ed:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2E:85:49:53:78:59:63:7B:EB:AE:B2:10:1A:CC:B0:EE:27:BA:8C
            X509v3 Authority Key Identifier:
                keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8c:37:97:1f:e3:25:4b:30:b5:7c:ff:01:59:ed:f5:81:32:
         13:99:95:50:84:3e:17:44:8f:35:3f:8c:74:36:2f:1d:9a:03:
         09:7e:fa:50:23:30:f5:fb:6c:09:8e:e7:e7:50:f0:99:ed:c4:
         be:73:82:fe:b0:b6:0c:45:89:1f:e0:c3:4e:d7:79:5a:32:e6:
         61:c7:84:22:5d:26:08:42:97:ef:04:f6:63:0d:18:b5:cd:84:
         a7:e2:4a:16:e8:e8:91:78:60:df:59:94:d0:83:31:dd:09:9a:
         2b:00:70:dd:ac:00:4a:85:67:23:d6:77:56:23:1a:1e:26:b2:
         1e:5a:a9:61:dc:e9:d8:61:c4:49:7b:2f:b3:44:51:ac:a2:8c:
         73:cf:13:67:d4:34:4b:4a:2e:ee:23:a8:1c:9c:62:ab:41:c2:
         50:c3:76:56:73:70:02:37:dd:f3:7d:5a:0b:8f:5f:42:c0:53:
         c4:bc:fa:41:54:92:6a:6b:3d:27:7f:0b:55:41:34:47:20:28:
         7b:cd:f7:c5:4a:33:d7:dc:d9:20:b1:d2:7f:0a:3c:05:e5:e0:
         4a:92:94:fd:3d:38:ca:5d:4e:65:e6:51:a3:54:4c:e0:92:cb:
         b8:80:e9:7d:4f:49:bf:e0:76:09:f5:96:3e:1d:df:da:2b:85:
         75:58:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----