Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/40/541D1D33145F1775FDE0BEE29E51CF452AF8263B.mft
File:                     541D1D33145F1775FDE0BEE29E51CF452AF8263B.mft (raw, json)
Hash identifier:          OTjz6f9d3Ts4Rb+2fBEYMcANFqGailIz16NlDRLL7D4=
Subject key identifier:   A1:68:60:3D:4C:28:E6:36:F6:AB:D1:C0:BA:CD:9C:1B:94:80:68:B3
Authority key identifier: 54:1D:1D:33:14:5F:17:75:FD:E0:BE:E2:9E:51:CF:45:2A:F8:26:3B
Certificate issuer:       /CN=541d1d33145f1775fde0bee29e51cf452af8263b
Certificate serial:       1BDB3003D3785BE7D7C373B284D61D428E32F81D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VB0dMxRfF3X94L7inlHPRSr4Jjs.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/40/541D1D33145F1775FDE0BEE29E51CF452AF8263B.mft
Manifest number:          2F
Signing time:             Tue 29 Dec 2020 08:06:00 +0000
Manifest this update:     Tue 29 Dec 2020 08:01:00 +0000
Manifest next update:     Wed 30 Dec 2020 08:06:00 +0000
Files and hashes:         1: 3139342e33312e3135302e302f32342d3234203d3e20323037353936.roa (hash: whOBpJ2AVccOKuUMb8Ofv1LKLejRrcNdIgAQI7WSKTQ=)
                          2: 541D1D33145F1775FDE0BEE29E51CF452AF8263B.crl (hash: I4aDUwMhyu3hNckc9yUTG/25G/6T3P3DL9mOlviLUKE=)
                          3: 3139342e33312e3135302e302f32342d3234203d3e203631333137.roa (hash: MVaHtDixxeoOa+yn8oQ26bo0pfg28INt1NyR0ldXcEw=)
                          4: 3139342e33312e3134382e302f32332d3234203d3e203631333137.roa (hash: JP/TF9K1fY7RdhTVmIoyz58ggbGWjfCMpLk1ZpdPoMI=)
                          5: 3139342e33312e3134392e302f32342d3234203d3e203339353236.roa (hash: 7oKj1fdPEmTMjToleRIlXQo2rT4xcjN3ll9cse3LulI=)
                          6: 3139342e33312e3134382e302f32342d3234203d3e20323133303339.roa (hash: UzlqmxyVXcWhr67TKaaVUjW3NgRrWCIqU7BC+vFAnek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:db:30:03:d3:78:5b:e7:d7:c3:73:b2:84:d6:1d:42:8e:32:f8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541d1d33145f1775fde0bee29e51cf452af8263b
        Validity
            Not Before: Dec 29 08:01:00 2020 GMT
            Not After : Jan  5 08:06:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e0:8f:9c:5e:e6:8b:48:9d:3b:cd:7e:94:20:
                    6a:e2:6a:52:b8:e4:28:d3:08:68:a1:ce:28:0e:46:
                    dd:9d:f7:2e:46:77:94:cd:c3:c4:a4:0c:b3:0f:d7:
                    2f:33:c0:71:3d:f6:fc:2a:0c:10:7d:a5:32:56:bd:
                    56:49:7f:43:c7:3f:ed:86:34:e8:38:a5:f9:29:1d:
                    88:e7:82:d5:71:22:c8:94:75:e7:26:e5:df:83:d0:
                    e2:37:a1:f2:81:fe:a6:14:5a:f8:ec:6d:d3:09:7a:
                    18:59:3f:fc:e6:45:dd:31:c8:00:f1:bb:e2:ea:c0:
                    e2:42:fc:e5:a1:e7:fa:ad:a6:f4:ae:d1:f7:0a:f8:
                    85:b2:9e:b4:1f:74:4e:eb:62:e0:b8:3b:7b:63:31:
                    98:32:37:4a:c6:57:7b:85:35:a5:ce:9c:c3:91:9d:
                    cd:79:2d:b8:15:a4:b0:97:3c:ca:6f:f1:41:d7:08:
                    89:22:e4:50:43:0f:3f:e7:fb:5a:2b:90:31:a7:9b:
                    6e:0d:9c:33:3b:68:6e:18:66:df:fe:68:ac:cd:e5:
                    46:f2:35:53:68:7b:a7:94:c7:05:21:d1:cb:df:53:
                    15:c2:59:64:a3:3f:18:75:18:9c:f4:dd:2b:c2:1d:
                    a9:23:7b:d8:f4:3b:38:4e:be:3a:b9:c0:04:9a:e3:
                    08:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:68:60:3D:4C:28:E6:36:F6:AB:D1:C0:BA:CD:9C:1B:94:80:68:B3
            X509v3 Authority Key Identifier:
                keyid:54:1D:1D:33:14:5F:17:75:FD:E0:BE:E2:9E:51:CF:45:2A:F8:26:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/40/541D1D33145F1775FDE0BEE29E51CF452AF8263B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB0dMxRfF3X94L7inlHPRSr4Jjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/40/541D1D33145F1775FDE0BEE29E51CF452AF8263B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:63:26:8c:8a:4c:17:ba:ee:5e:0c:b3:28:0b:21:26:a3:55:
         f1:00:34:13:36:37:2f:34:07:f2:02:70:82:97:7b:e1:aa:51:
         3d:30:61:dc:d6:9b:b4:21:07:16:67:bf:5b:8c:59:cc:5a:3d:
         6f:11:a5:fa:ec:3e:77:a4:ad:74:df:fc:eb:27:b8:9b:63:92:
         f4:99:7e:b7:79:74:79:e4:ba:42:eb:c3:d8:c6:ea:1b:b9:3d:
         30:0a:3c:17:3b:31:1e:0e:79:72:0e:db:f0:a6:15:52:93:85:
         97:a1:e8:63:c9:31:f0:d5:36:cd:6c:18:fa:09:9d:dc:3d:79:
         51:5e:02:2e:da:0d:9a:ea:ec:a7:d7:fd:58:e4:7d:3f:28:69:
         f2:3c:e9:c1:b8:9a:f0:cd:0a:3b:e5:93:62:76:0c:46:63:5e:
         0f:4e:a1:60:b4:7d:fc:09:18:23:50:90:8a:78:3c:5b:33:76:
         9e:e6:ce:5b:54:c0:e3:52:82:7b:aa:8e:ea:72:c0:c8:e1:74:
         68:d7:86:c2:98:cd:bd:fc:a1:16:9f:e8:c9:fb:57:ec:a1:2a:
         d5:42:f0:7e:64:cb:2d:75:5c:da:b6:ac:dc:c2:6f:2a:0b:bb:
         68:a2:e4:92:35:90:cb:6c:da:cd:7b:98:e4:f5:db:f7:46:dc:
         b9:de:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----