Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/47/1DF1BF6ECEF25C0EE0A521DF9257AE3EE7A24DBB.mft
File:                     1DF1BF6ECEF25C0EE0A521DF9257AE3EE7A24DBB.mft (raw, json)
Hash identifier:          7QAYJw0rlygvl1gegEDbP7h66xiXUOSDkq91QIFB1HI=
Subject key identifier:   D5:54:44:BC:39:1A:CA:69:D3:21:71:8E:AB:87:17:09:24:DF:2A:04
Authority key identifier: 1D:F1:BF:6E:CE:F2:5C:0E:E0:A5:21:DF:92:57:AE:3E:E7:A2:4D:BB
Certificate issuer:       /CN=1df1bf6ecef25c0ee0a521df9257ae3ee7a24dbb
Certificate serial:       46B07181BC63D25D6ABE3E439C387DD8229ACA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HfG_bs7yXA7gpSHfkleuPueiTbs.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/47/1DF1BF6ECEF25C0EE0A521DF9257AE3EE7A24DBB.mft
Manifest number:          8A
Signing time:             Tue 02 Mar 2021 17:48:00 +0000
Manifest this update:     Tue 02 Mar 2021 17:43:00 +0000
Manifest next update:     Wed 03 Mar 2021 17:48:00 +0000
Files and hashes:         1: 34352e36372e3231362e302f32332d3234203d3e203631333137.roa (hash: MhV7IpXJDa9bwVFK1dMwTwIkFfAlPzsViudSBBOhl+0=)
                          2: 1DF1BF6ECEF25C0EE0A521DF9257AE3EE7A24DBB.crl (hash: gxYfFSKiZNSHWG1qp0RooXjjsODqLcBnHmm1UkTQsSU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b0:71:81:bc:63:d2:5d:6a:be:3e:43:9c:38:7d:d8:22:9a:ca:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df1bf6ecef25c0ee0a521df9257ae3ee7a24dbb
        Validity
            Not Before: Mar  2 17:43:00 2021 GMT
            Not After : Mar  9 17:48:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:bc:01:98:05:d7:72:c7:74:c6:ed:f5:37:
                    8b:8f:37:e1:3a:2d:71:1b:1e:f3:0c:f9:82:90:82:
                    f7:b3:8b:c9:38:fd:a8:d5:73:cc:11:b5:55:dc:0d:
                    63:63:85:24:23:3d:64:67:3f:c1:34:d8:d5:94:38:
                    bb:d0:73:87:75:ff:88:a7:cf:ad:57:b4:49:08:83:
                    e6:5d:d5:3f:06:fd:da:e2:68:5c:9a:c7:4d:62:ab:
                    65:28:b8:e4:81:67:12:51:13:03:2a:5c:b9:a0:92:
                    6e:a0:35:98:f1:af:27:a9:a6:b1:d3:e8:39:07:e0:
                    74:7d:a0:15:e1:b9:cd:8d:c6:66:cd:f6:38:3f:52:
                    8e:d7:5f:d7:e7:63:a7:21:b3:2b:46:0d:a4:03:a8:
                    59:cd:d9:45:fb:e0:e6:23:6b:66:a3:3c:94:c9:7f:
                    a9:26:b6:ec:9f:69:a3:05:ab:30:02:44:38:84:8e:
                    33:b5:84:33:1b:ca:8a:37:a5:cc:5f:22:79:b6:60:
                    34:02:02:39:7a:e3:d1:d5:92:f1:d7:82:83:eb:31:
                    31:43:fb:46:fe:d2:31:cb:8c:d9:54:cc:a3:c6:50:
                    50:c8:f6:8f:60:63:47:84:89:0b:2d:f3:39:99:20:
                    2c:8e:6f:3e:ef:4f:8b:da:ff:b7:3f:97:54:45:e9:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:54:44:BC:39:1A:CA:69:D3:21:71:8E:AB:87:17:09:24:DF:2A:04
            X509v3 Authority Key Identifier:
                keyid:1D:F1:BF:6E:CE:F2:5C:0E:E0:A5:21:DF:92:57:AE:3E:E7:A2:4D:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/47/1DF1BF6ECEF25C0EE0A521DF9257AE3EE7A24DBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfG_bs7yXA7gpSHfkleuPueiTbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/47/1DF1BF6ECEF25C0EE0A521DF9257AE3EE7A24DBB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:43:8a:fb:1a:c5:54:bf:bf:ad:0a:a3:e6:8e:35:32:12:17:
         a3:dd:f1:bb:38:4d:c5:db:67:5c:de:eb:62:c3:21:14:a3:7a:
         70:0d:c8:f7:9c:65:a9:f5:8e:f8:99:6c:8d:af:6d:d7:04:94:
         f6:54:40:b4:ca:1b:35:6a:e8:72:82:ab:66:57:21:42:74:06:
         e8:22:f8:64:a6:70:3c:43:9c:8d:4b:5c:ea:4b:43:0f:d9:fe:
         70:d9:64:6a:27:c4:f1:f7:7c:d8:9c:14:57:c5:60:c7:12:8f:
         e0:00:33:20:d7:bc:b9:81:e0:fc:47:df:6b:95:b7:18:87:7e:
         61:de:8b:76:8b:65:b4:94:62:3f:50:f1:05:1d:0d:cc:8e:d8:
         b5:32:4f:0a:f1:13:8f:9c:69:02:95:66:f8:2b:c5:1f:40:00:
         7d:12:ad:ab:e2:42:ca:0b:d0:0f:83:e8:db:00:93:8a:b4:12:
         1b:b3:44:7b:8e:15:58:a9:7d:c5:a0:d5:43:05:ce:5c:30:70:
         f0:b3:a4:ba:0f:8e:07:e5:e6:b3:ce:f3:f5:7e:c2:bf:ef:2f:
         31:20:0a:62:1d:e9:fe:89:50:2e:47:a2:35:29:7a:2a:d7:7b:
         15:08:d3:66:14:3a:b2:ce:ed:38:4f:16:56:ee:9d:5d:24:07:
         c6:29:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----