Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/55/C9D78D8A48B0E6FA4D59727081D02AFDA59F8650.mft
File:                     C9D78D8A48B0E6FA4D59727081D02AFDA59F8650.mft (raw, json)
Hash identifier:          JhlDB78VIPEGbROBsuARrZoZ4KDIAdWyDdY3TlUVg78=
Subject key identifier:   4C:02:4E:83:6C:16:23:99:3B:84:D8:A8:5E:ED:B6:49:36:76:E1:39
Authority key identifier: C9:D7:8D:8A:48:B0:E6:FA:4D:59:72:70:81:D0:2A:FD:A5:9F:86:50
Certificate issuer:       /CN=c9d78d8a48b0e6fa4d59727081d02afda59f8650
Certificate serial:       6152B8473C674A2328AA5ABFD1C1B7B15398B00A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydeNikiw5vpNWXJwgdAq_aWfhlA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/55/C9D78D8A48B0E6FA4D59727081D02AFDA59F8650.mft
Manifest number:          8C
Signing time:             Tue 02 Mar 2021 18:02:00 +0000
Manifest this update:     Tue 02 Mar 2021 17:57:00 +0000
Manifest next update:     Wed 03 Mar 2021 18:02:00 +0000
Files and hashes:         1: 352e3138302e36312e302f32342d3234203d3e20323133303335.roa (hash: 7uVaoWwiPMLAa3NLsJ6BLFOOKYKiNKxFFvw3PQbZbwo=)
                          2: C9D78D8A48B0E6FA4D59727081D02AFDA59F8650.crl (hash: cRzxlK/L6QeIGlRbQw0UfQIoKGE9Rz6fYZTcZnKF0d4=)
                          3: 352e3138302e36302e302f32342d3234203d3e20323133303335.roa (hash: vFMvj/xBvBo8gmn0arwMLw8XBmQo3sFqeaUMfBvQbck=)
                          4: 352e3138302e36302e302f32332d3234203d3e203631333137.roa (hash: m/eDDyIuoR8WBvdfMOvh3gG0+jcBLIzgVqt7gmxZe8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:52:b8:47:3c:67:4a:23:28:aa:5a:bf:d1:c1:b7:b1:53:98:b0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d78d8a48b0e6fa4d59727081d02afda59f8650
        Validity
            Not Before: Mar  2 17:57:00 2021 GMT
            Not After : Mar  9 18:02:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:36:fd:d5:5b:61:f1:90:7a:48:f3:16:61:
                    37:53:20:62:09:92:70:b2:cc:cf:1a:ab:d7:c9:3a:
                    f8:cc:2a:ef:4b:ee:aa:9d:ba:0d:7f:bf:44:1f:8f:
                    a5:04:c3:da:60:83:b7:1e:71:aa:83:fe:cb:47:5a:
                    17:ef:db:cf:d4:21:dd:0d:2a:91:79:01:69:4b:4f:
                    b1:cd:e2:6b:27:09:05:f7:35:92:a4:f7:10:9e:98:
                    2e:57:7e:d1:0c:68:bf:19:ee:52:fd:f5:4b:86:6e:
                    18:da:ae:7d:43:3f:16:f2:00:9b:fa:2e:90:88:67:
                    66:30:9c:97:d4:6e:33:90:d2:12:64:46:b9:ae:d0:
                    02:9d:c4:5c:83:69:0e:2c:5e:72:4c:a9:26:f5:86:
                    52:4e:1a:30:78:96:23:21:cb:bc:58:9a:32:8f:d8:
                    b7:8d:26:ce:d1:de:0b:db:76:d7:f8:61:ef:d7:45:
                    1c:dc:ce:3f:61:b2:4d:dd:fa:da:5a:f4:eb:a6:72:
                    ed:4a:4f:2b:fb:66:d1:ee:c0:25:76:51:15:ce:5d:
                    70:19:6c:eb:52:5b:b0:27:9e:80:03:82:64:ab:ab:
                    93:3b:63:dc:80:ef:c3:f0:ff:31:7f:da:67:b7:4d:
                    a0:c4:5b:70:4c:ad:a9:a2:b8:91:f1:b6:cd:63:44:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:02:4E:83:6C:16:23:99:3B:84:D8:A8:5E:ED:B6:49:36:76:E1:39
            X509v3 Authority Key Identifier:
                keyid:C9:D7:8D:8A:48:B0:E6:FA:4D:59:72:70:81:D0:2A:FD:A5:9F:86:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/55/C9D78D8A48B0E6FA4D59727081D02AFDA59F8650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydeNikiw5vpNWXJwgdAq_aWfhlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/55/C9D78D8A48B0E6FA4D59727081D02AFDA59F8650.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:b9:81:66:08:e8:d4:1d:b9:c6:54:92:1c:a9:b9:7b:e7:26:
         89:72:51:6b:65:ef:6c:08:26:26:ad:8c:d8:6a:fe:71:6e:c8:
         f0:ab:40:56:f9:48:90:71:72:df:48:5e:6f:9e:88:d2:6c:19:
         cd:eb:ca:f3:10:4c:8d:65:b9:98:cb:4b:23:cb:78:c3:5d:5a:
         88:47:1f:dd:06:2f:a5:25:d1:68:62:1f:6e:45:99:45:c4:a4:
         8a:71:75:a4:87:94:89:5d:8d:15:cb:20:ac:23:95:2e:25:10:
         0e:ee:07:50:4e:9a:7c:e7:86:d4:14:95:73:45:aa:30:8c:dd:
         f3:53:60:6f:27:d3:52:90:e7:eb:80:bb:02:2a:05:34:ca:bf:
         f9:0e:b4:12:54:58:d5:17:52:1d:92:92:d2:7b:2b:88:aa:e7:
         34:9c:2f:75:0c:f6:03:da:4d:cd:6b:02:bc:96:35:97:32:0c:
         b0:ab:dd:9e:d0:1f:56:00:9d:f0:40:e6:08:66:49:16:a4:0d:
         22:b2:7b:57:bc:de:b4:70:1c:8c:a2:a1:42:3b:9b:f8:c2:20:
         e7:6c:39:c9:e0:24:81:05:2c:a5:80:61:af:15:b7:01:50:cc:
         27:c8:47:f3:2b:4b:f7:09:d7:8b:67:7c:7a:0a:95:4d:cb:4e:
         f8:17:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----