Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/35/635603BDB3A8C8222338D9EBA0EDF09D9FD81085.mft
File:                     635603BDB3A8C8222338D9EBA0EDF09D9FD81085.mft (raw, json)
Hash identifier:          LDOz3eNrcZ8j6BEvVPn2yQYMb+oAr5fxdIj1ObxAj8I=
Subject key identifier:   60:C2:8E:C5:49:68:13:BC:09:4F:58:5E:D9:D3:8F:67:09:CC:02:C1
Authority key identifier: 63:56:03:BD:B3:A8:C8:22:23:38:D9:EB:A0:ED:F0:9D:9F:D8:10:85
Certificate issuer:       /CN=635603bdb3a8c8222338d9eba0edf09d9fd81085
Certificate serial:       06BFEA65EF7D6624B6BD9207D727100616FD5074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y1YDvbOoyCIjONnroO3wnZ_YEIU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/35/635603BDB3A8C8222338D9EBA0EDF09D9FD81085.mft
Manifest number:          8C
Signing time:             Tue 02 Mar 2021 21:42:00 +0000
Manifest this update:     Tue 02 Mar 2021 21:37:00 +0000
Manifest next update:     Wed 03 Mar 2021 21:42:00 +0000
Files and hashes:         1: 34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa (hash: kvktgREcfi9IhqTeKMncNSQaXeiNa4BoB32GBPeyCkg=)
                          2: 635603BDB3A8C8222338D9EBA0EDF09D9FD81085.crl (hash: E84rH2gzHefSn8IbYHvA3ohqb5cZcXYwPzcaV9J3T3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:bf:ea:65:ef:7d:66:24:b6:bd:92:07:d7:27:10:06:16:fd:50:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635603bdb3a8c8222338d9eba0edf09d9fd81085
        Validity
            Not Before: Mar  2 21:37:00 2021 GMT
            Not After : Mar  9 21:42:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:75:97:1d:57:93:3c:b3:42:46:92:b3:2f:
                    28:0b:53:30:34:39:73:0e:33:36:00:2b:b5:51:14:
                    78:5e:e2:15:90:b8:46:7c:4a:4c:01:a8:42:73:cc:
                    8f:94:75:bb:54:6f:a7:67:ea:bc:bc:04:2a:36:af:
                    6b:02:ba:cd:99:40:41:a9:98:83:d3:10:0b:33:fd:
                    02:80:b8:a0:bf:26:c1:3b:7d:33:96:ce:9f:ea:0d:
                    9c:07:d4:1e:fa:ec:5c:e9:c3:ac:c5:a3:bf:8c:05:
                    55:c7:f6:b1:a2:5f:ea:c5:9b:70:4d:1f:24:d8:17:
                    8f:cc:d9:9a:79:00:10:be:45:02:79:a8:f2:95:53:
                    e5:c7:b4:81:53:14:b3:e4:09:1e:98:e0:6b:98:6f:
                    ad:1b:bf:f6:21:96:7d:4b:49:2c:4a:b2:90:cf:a9:
                    a7:27:67:04:90:af:78:d9:4f:98:41:6f:b2:ff:03:
                    b2:b3:25:32:3d:12:3e:b9:71:da:35:b3:33:c2:a3:
                    ed:07:2a:56:89:06:d8:a5:7b:36:2d:a5:ee:b5:bd:
                    fb:96:e9:10:35:a8:6a:f1:51:5b:d1:81:a9:fb:d1:
                    00:82:b6:42:cd:df:ee:4a:52:1a:4f:eb:2d:1f:f4:
                    a0:d5:8f:7f:0b:6e:b6:0b:ba:95:03:cf:56:fa:26:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C2:8E:C5:49:68:13:BC:09:4F:58:5E:D9:D3:8F:67:09:CC:02:C1
            X509v3 Authority Key Identifier:
                keyid:63:56:03:BD:B3:A8:C8:22:23:38:D9:EB:A0:ED:F0:9D:9F:D8:10:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/35/635603BDB3A8C8222338D9EBA0EDF09D9FD81085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1YDvbOoyCIjONnroO3wnZ_YEIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/35/635603BDB3A8C8222338D9EBA0EDF09D9FD81085.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f4:4b:a6:15:c4:20:9b:22:5b:a3:17:e7:d4:f8:f8:5a:26:
         06:ef:25:46:92:5a:44:7b:28:49:0f:ab:fe:b8:90:19:90:d8:
         f8:65:9f:82:a9:95:bc:2f:9c:54:e6:36:0b:1c:6d:de:82:ab:
         db:16:15:93:ee:da:80:eb:2b:a0:00:90:25:5d:09:40:79:b0:
         cb:46:fa:86:5f:72:87:1c:e8:26:fb:76:16:19:05:6e:fd:15:
         2e:97:c1:7e:1f:c8:68:2a:6e:7f:05:1d:32:54:ce:24:0f:0b:
         6e:a6:23:3d:8e:1e:17:52:d1:d4:eb:c9:7e:c0:ad:20:1f:b3:
         4c:59:65:97:22:fb:82:62:7d:df:22:d5:43:67:9a:3e:09:1f:
         00:e5:80:b6:ac:2b:71:4c:94:61:5f:77:3c:59:21:ec:31:da:
         6c:95:9e:21:42:d7:2f:12:9e:4f:33:a4:05:96:cf:db:bf:37:
         cd:d4:a2:b2:e0:e2:cb:e0:8e:cc:28:3b:19:39:22:d7:41:06:
         6d:94:b6:74:20:ce:15:5a:8d:3b:2e:59:25:d2:37:5a:ba:be:
         6d:fe:29:bb:6a:10:fc:9e:e7:76:42:b4:b8:7a:3c:dd:c8:98:
         be:05:7c:2f:d8:c4:9e:bd:2a:50:7d:42:e4:86:e0:67:f3:e2:
         c4:9a:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----