Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.mft
File:                     BC745611F3E07D863EABDD6E11B69D47161C74D0.mft (raw, json)
Hash identifier:          Fkr6BdV5uFNAzo3jpjULAlrEVtx8Z9Eo+++xnhrtndA=
Subject key identifier:   BB:EB:F2:9B:FF:B1:25:17:EF:DA:A1:2F:34:E4:5B:E5:2B:85:18:F4
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Certificate issuer:       /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial:       7F7CEEA3DD8D568A8951C592AEF37FAF7155FF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.mft
Manifest number:          95
Signing time:             Tue 02 Mar 2021 11:20:00 +0000
Manifest this update:     Tue 02 Mar 2021 11:15:00 +0000
Manifest next update:     Wed 03 Mar 2021 11:20:00 +0000
Files and hashes:         1: 352e3138322e31372e302f32342d3234203d3e20323132373335.roa (hash: R8PizMlnKh187OFNG6SIHGRF53rdP9doAWXd5ALz6ug=)
                          2: BC745611F3E07D863EABDD6E11B69D47161C74D0.crl (hash: oMxuF+bo4rmw68QeTzLLM9ggZg7pYgvXA+RBWztudmo=)
                          3: 352e3138322e31382e302f32342d3234203d3e203233343730.roa (hash: MBjcblULpJmEip7s6R6ndoyfAACgq/0/8eKN/CIADhA=)
                          4: 352e3138322e31372e302f32342d3234203d3e20323132303837.roa (hash: UMtDW8aWZfPN0t4ZJNRae/1bWeVvbmyf85eVEMTjAKs=)
                          5: 352e3138322e31362e302f32342d3234203d3e20323132353630.roa (hash: vfyE8yt4rhKWQLGzP+rMa7Ur7oYbi8WNHJ7UrT0uJFo=)
                          6: 352e3138322e31392e302f32342d3234203d3e203333333837.roa (hash: US9IPrL6WQL77gwqYaRsY1rdp1eQbQfwVWg7yCz28fU=)
                          7: 352e3138322e31362e302f32342d3234203d3e20323133303139.roa (hash: RwORjQgMv7U4D+dELcyojpfAMWZUADZJO0yXbxz7DU4=)
                          8: 352e3138322e31372e302f32342d3234203d3e20323132333430.roa (hash: yKNF+abRm3I9/MHTsNvw9zehHV+VaeHT09x9e75KdjI=)
                          9: 352e3138322e31362e302f32332d3234203d3e203631333137.roa (hash: j3rIAcqDKHq2mVcuiArUnz6BmSOF5fH//A71S8dxQZ4=)
                          10: 352e3138322e31382e302f32332d3234203d3e203631333137.roa (hash: r/fD31FZVEZqEo6maQ9AkxqUdAWn5WnWATy5EWKCfsg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7c:ee:a3:dd:8d:56:8a:89:51:c5:92:ae:f3:7f:af:71:55:ff:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
        Validity
            Not Before: Mar  2 11:15:00 2021 GMT
            Not After : Mar  9 11:20:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:c5:7a:a7:1c:6a:dd:3a:05:be:fd:fa:7d:
                    89:32:58:7b:e1:14:6b:f5:41:ff:f7:47:a0:60:da:
                    86:49:8a:8c:be:85:5e:f0:f5:29:01:d4:15:af:60:
                    f7:53:4a:de:0d:22:fe:d8:22:33:9e:10:36:49:02:
                    0b:6e:70:e8:62:78:29:f9:6a:85:82:7c:dd:c0:80:
                    56:66:62:12:c1:d0:c2:b8:e3:be:a9:5b:fb:4e:5d:
                    40:10:b7:4f:e7:50:ce:8c:ab:a5:2b:05:3d:ef:d7:
                    07:e1:3c:ea:c8:41:77:50:f9:af:e6:df:33:07:ba:
                    9e:bc:d7:ce:ed:52:a9:e2:05:ad:a2:bb:8b:27:6a:
                    4a:c9:d9:ed:83:e7:ce:7e:39:8d:88:aa:4b:31:cc:
                    1f:e7:9e:8b:11:5c:4b:56:15:18:b1:0e:de:e8:ad:
                    64:7f:a4:49:be:52:41:df:78:13:54:f9:e4:8a:db:
                    f9:1c:04:a4:48:87:b7:a1:75:66:cb:db:89:8e:57:
                    72:f0:92:59:37:af:88:44:93:51:1a:2b:b9:e7:50:
                    f4:ce:98:a2:a2:a9:c9:1e:ed:cf:c9:36:fc:fd:ca:
                    a1:82:92:f5:93:52:de:a2:46:be:a9:6b:76:d4:26:
                    02:5f:80:75:24:a5:2b:c1:9a:09:a3:3b:ae:48:99:
                    7d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EB:F2:9B:FF:B1:25:17:EF:DA:A1:2F:34:E4:5B:E5:2B:85:18:F4
            X509v3 Authority Key Identifier:
                keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:45:2f:db:0f:8c:0e:7a:11:bf:ba:9e:57:83:1e:ad:7a:c6:
         89:62:e8:7b:b2:f2:9f:df:b7:d4:1a:f1:5f:e3:00:4e:f6:ad:
         1e:99:0c:72:53:43:61:b8:4f:ea:4c:47:13:f1:91:4d:a8:c7:
         d6:22:57:7e:88:2a:18:c3:b8:05:4f:39:f1:1e:2b:6e:a2:10:
         ac:43:2d:37:cf:50:53:cd:dd:ed:2f:5a:36:f6:6f:be:ed:9c:
         3f:c5:0f:4c:2f:a3:b8:94:ec:12:da:41:32:41:1d:71:d5:00:
         1c:60:86:c6:71:90:c9:66:b1:83:19:ba:db:94:a5:7d:dd:13:
         4a:9c:e3:b1:6b:8e:cb:e0:2f:53:0c:86:cc:7d:ad:1a:90:fc:
         91:14:56:72:56:f0:ee:2a:02:75:ac:e5:58:86:f5:cd:75:16:
         97:2a:84:1e:46:98:60:6f:66:4c:d3:d1:b1:2d:b1:12:18:f0:
         6f:15:d9:f0:38:1f:3d:69:ca:dd:1d:ae:0d:81:07:f1:b7:de:
         8b:79:e1:d4:49:39:a4:50:aa:a9:fb:31:53:82:2e:82:80:ce:
         bc:be:f2:b9:41:08:77:f0:37:91:f0:f1:67:f9:65:2f:cd:84:
         42:69:cd:d8:62:41:36:3a:3f:83:49:6b:45:b3:d6:d0:f4:e3:
         6d:65:b2:7d
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUf3zuo92NVoqJUcWSrvN/r3FV/zMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmM3NDU2MTFmM2UwN2Q4NjNlYWJkZDZlMTFiNjlkNDcx
NjFjNzRkMDAeFw0yMTAzMDIxMTE1MDBaFw0yMTAzMDkxMTIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzYxNEM1N0FBNzFDNkFERDNB
MDVCRUZERkE3RDg5MzI1ODdCRTExNDZCRjU0MUZGRjc0N0EwNjBEQTg2NDk4QThD
QkU4NTVFRjBGNTI5MDFENDE1QUY2MEY3NTM0QURFMEQyMkZFRDgyMjMzOUUxMDM2
NDkwMjBCNkU3MEU4NjI3ODI5Rjk2QTg1ODI3Q0REQzA4MDU2NjY2MjEyQzFEMEMy
QjhFM0JFQTk1QkZCNEU1RDQwMTBCNzRGRTc1MENFOENBQkE1MkIwNTNERUZENzA3
RTEzQ0VBQzg0MTc3NTBGOUFGRTZERjMzMDdCQTlFQkNEN0NFRUQ1MkE5RTIwNUFE
QTJCQjhCMjc2QTRBQzlEOUVEODNFN0NFN0UzOThEODhBQTRCMzFDQzFGRTc5RThC
MTE1QzRCNTYxNTE4QjEwRURFRThBRDY0N0ZBNDQ5QkU1MjQxREY3ODEzNTRGOUU0
OEFEQkY5MUMwNEE0NDg4N0I3QTE3NTY2Q0JEQjg5OEU1NzcyRjA5MjU5MzdBRjg4
NDQ5MzUxMUEyQkI5RTc1MEY0Q0U5OEEyQTJBOUM5MUVFRENGQzkzNkZDRkRDQUEx
ODI5MkY1OTM1MkRFQTI0NkJFQTk2Qjc2RDQyNjAyNUY4MDc1MjRBNTJCQzE5QTA5
QTMzQkFFNDg5OTdENEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxhTFeqccat06Bb79+n2JMlh74RRr9UH/90egYNqGSYqMvoVe8PUp
AdQVr2D3U0reDSL+2CIznhA2SQILbnDoYngp+WqFgnzdwIBWZmISwdDCuOO+qVv7
Tl1AELdP51DOjKulKwU979cH4TzqyEF3UPmv5t8zB7qevNfO7VKp4gWtoruLJ2pK
ydntg+fOfjmNiKpLMcwf556LEVxLVhUYsQ7e6K1kf6RJvlJB33gTVPnkitv5HASk
SIe3oXVmy9uJjldy8JJZN6+IRJNRGiu551D0zpiioqnJHu3PyTb8/cqhgpL1k1Le
oka+qWt21CYCX4B1JKUrwZoJozuuSJl9TwIDAQABo4IB/TCCAfkwHQYDVR0OBBYE
FLvr8pv/sSUX79qhLzTkW+UrhRj0MB8GA1UdIwQYMBaAFLx0VhHz4H2GPqvdbhG2
nUcWHHTQMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yOS9CQzc0
NTYxMUYzRTA3RDg2M0VBQkRENkUxMUI2OUQ0NzE2MUM3NEQwLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkhSV0VmUGdmWVktcTkxdUViYWRSeFljZE5BLmNlcjB7
BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzI5L0JDNzQ1NjExRjNFMDdEODYz
RUFCREQ2RTExQjY5RDQ3MTYxQzc0RDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0RS/bD4wOehG/up5X
gx6tesaJYuh7svKf37fUGvFf4wBO9q0emQxyU0NhuE/qTEcT8ZFNqMfWIld+iCoY
w7gFTznxHituohCsQy03z1BTzd3tL1o29m++7Zw/xQ9ML6O4lOwS2kEyQR1x1QAc
YIbGcZDJZrGDGbrblKV93RNKnOOxa47L4C9TDIbMfa0akPyRFFZyVvDuKgJ1rOVY
hvXNdRaXKoQeRphgb2ZM09GxLbESGPBvFdnwOB89acrdHa4NgQfxt96LeeHUSTmk
UKqp+zFTgi6CgM68vvK5QQh38DeR8PFn+WUvzYRCac3YYkE2Oj+DSWtFs9bQ9ONt
ZbJ9
-----END CERTIFICATE-----