Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/56/D520DB09A828DD1955CAD118F7F9F02C882F4032.mft
File:                     D520DB09A828DD1955CAD118F7F9F02C882F4032.mft (raw, json)
Hash identifier:          iA/dy6Ulpjfwnwkyi5uJ1PFW4cm6EpDRi47NN/24pPY=
Subject key identifier:   43:A3:26:29:F0:35:B3:7D:98:93:9A:76:51:F6:B1:2D:DD:C7:CF:CB
Authority key identifier: D5:20:DB:09:A8:28:DD:19:55:CA:D1:18:F7:F9:F0:2C:88:2F:40:32
Certificate issuer:       /CN=d520db09a828dd1955cad118f7f9f02c882f4032
Certificate serial:       6EDDD4D4D9B04AF266B551B9C5C67063FE23053D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SDbCago3RlVytEY9_nwLIgvQDI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/56/D520DB09A828DD1955CAD118F7F9F02C882F4032.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 09:12:00 +0000
Manifest this update:     Tue 02 Mar 2021 09:07:00 +0000
Manifest next update:     Wed 03 Mar 2021 09:12:00 +0000
Files and hashes:         1: D520DB09A828DD1955CAD118F7F9F02C882F4032.crl (hash: SemTE3HUquycuJsoZEmlfQEVkaNwQbZAE1vWpKkXKa0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:dd:d4:d4:d9:b0:4a:f2:66:b5:51:b9:c5:c6:70:63:fe:23:05:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d520db09a828dd1955cad118f7f9f02c882f4032
        Validity
            Not Before: Mar  2 09:07:00 2021 GMT
            Not After : Mar  9 09:12:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:ef:3c:53:ee:91:3e:3c:9b:4c:ff:b0:73:
                    31:34:75:9d:7d:32:84:d4:31:14:42:20:13:ad:19:
                    b6:d4:44:df:ea:56:a6:69:72:eb:ff:c3:41:73:67:
                    82:67:7d:0b:ef:5f:03:b4:58:fe:b3:1b:37:e7:dc:
                    7e:d9:e0:ed:3f:af:f7:89:72:50:4a:84:1d:96:dc:
                    c3:64:22:88:44:5c:c0:74:52:06:43:27:17:02:87:
                    d3:d8:ab:87:bf:d3:6a:fe:5a:83:47:2d:17:f5:86:
                    a4:b2:3f:79:b9:22:ed:6d:53:b1:7a:c7:f0:02:4d:
                    6f:83:8d:fd:df:b3:5f:9f:41:5a:2d:2c:15:eb:79:
                    f2:dc:86:fa:06:51:02:60:66:f8:65:83:fd:3a:f6:
                    f8:bd:e8:87:0b:bd:e3:9c:89:aa:c5:56:fa:64:9f:
                    e8:7e:b6:e8:0a:7c:52:06:86:19:a1:f0:c1:ad:61:
                    97:d7:02:f3:33:fb:58:52:84:98:71:6f:25:48:2b:
                    c8:a4:35:78:9c:84:86:34:52:16:52:83:4a:49:fc:
                    dc:ff:7b:8c:a3:5f:49:47:88:b3:ee:c7:b1:31:03:
                    dc:14:87:15:76:0d:f2:98:3a:17:5e:79:77:f1:76:
                    36:54:4b:1d:71:d6:42:3e:93:a5:b2:fd:e6:e8:33:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A3:26:29:F0:35:B3:7D:98:93:9A:76:51:F6:B1:2D:DD:C7:CF:CB
            X509v3 Authority Key Identifier:
                keyid:D5:20:DB:09:A8:28:DD:19:55:CA:D1:18:F7:F9:F0:2C:88:2F:40:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/56/D520DB09A828DD1955CAD118F7F9F02C882F4032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SDbCago3RlVytEY9_nwLIgvQDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/56/D520DB09A828DD1955CAD118F7F9F02C882F4032.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:93:39:f8:cc:33:2b:8c:f8:b6:d8:83:2a:04:2c:1d:d8:b6:
         e8:3c:7f:5a:71:96:c0:e0:c6:1c:52:f7:4a:eb:b2:11:9b:5a:
         c6:72:18:a7:8c:33:99:34:46:62:a1:f1:1b:87:ad:41:1c:e4:
         b6:eb:a0:b7:43:8b:21:27:55:5a:ef:8a:2f:c9:f5:ee:16:d9:
         ac:f0:a9:b9:6a:40:b4:17:9e:2b:0a:5d:44:e6:47:e5:f1:76:
         bb:cb:85:6e:34:aa:60:b8:d0:32:8d:78:b1:46:6e:e5:fd:eb:
         dd:df:b3:4a:80:ff:c0:94:4e:93:b7:3a:db:dc:d6:bc:ec:a0:
         b9:d8:f9:52:4d:78:b5:03:8f:ca:a9:fd:50:91:55:06:ac:b8:
         48:71:01:4c:95:26:21:25:2f:e8:2b:e7:d7:2f:15:69:c2:cc:
         2c:23:95:ad:a9:19:88:53:6f:46:2c:db:d2:12:3c:a2:e5:c2:
         44:ab:52:0b:63:5f:cc:27:e6:6b:2f:4a:65:eb:42:34:bc:8a:
         18:a2:af:18:f7:43:31:dc:bc:ea:cd:ad:63:ee:5c:b2:70:32:
         6d:f8:8e:28:a8:a9:7d:7f:34:da:a5:3e:46:c2:6a:dd:e9:aa:
         7a:a2:4b:b2:95:2b:fe:55:e7:c6:85:e7:30:c9:08:37:55:8d:
         dc:b9:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----