Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/67/B385A7117D54091430FDA0C9EC823C3F6127140D.mft
File:                     B385A7117D54091430FDA0C9EC823C3F6127140D.mft (raw, json)
Hash identifier:          S48CqHC837QIC5XYLYdCjHeVwCrVLo+Mta4o7amdek8=
Subject key identifier:   B2:FD:A8:5B:DA:CE:B2:DC:CE:0E:E0:D7:49:D8:06:49:9E:55:DC:ED
Authority key identifier: B3:85:A7:11:7D:54:09:14:30:FD:A0:C9:EC:82:3C:3F:61:27:14:0D
Certificate issuer:       /CN=b385a7117d54091430fda0c9ec823c3f6127140d
Certificate serial:       19EE030F00C33C1DE667E59A3F13B6F90A54C25D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4WnEX1UCRQw_aDJ7II8P2EnFA0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/67/B385A7117D54091430FDA0C9EC823C3F6127140D.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 10:04:00 +0000
Manifest this update:     Tue 02 Mar 2021 09:59:00 +0000
Manifest next update:     Wed 03 Mar 2021 10:04:00 +0000
Files and hashes:         1: B385A7117D54091430FDA0C9EC823C3F6127140D.crl (hash: HfDVHMB8HlZ75d1Hfkjm6dNFNxPLfrFOhDMtoMhfgcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ee:03:0f:00:c3:3c:1d:e6:67:e5:9a:3f:13:b6:f9:0a:54:c2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b385a7117d54091430fda0c9ec823c3f6127140d
        Validity
            Not Before: Mar  2 09:59:00 2021 GMT
            Not After : Mar  9 10:04:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:e5:b7:4b:f1:fb:d8:11:6f:b4:ed:76:9e:
                    3a:c7:6b:a7:6b:6f:21:36:e3:97:34:b7:fc:39:2b:
                    8a:5f:6f:db:0c:ee:a0:78:ae:5b:f6:a0:51:75:24:
                    c0:e7:f8:28:99:d6:af:5b:e8:61:91:de:7c:ac:e6:
                    e4:34:fd:e3:65:ba:34:0a:e0:4d:87:45:9e:52:e7:
                    9c:d7:75:4f:e1:78:ca:ad:5c:ef:f5:75:e0:08:7e:
                    95:5a:99:e3:1f:68:0d:4f:e9:b8:02:3a:41:be:30:
                    65:c8:93:68:a5:66:4e:d0:3e:7f:1f:fd:ee:3e:a1:
                    e5:82:9c:23:bf:a2:14:df:d5:56:fb:55:5f:b1:65:
                    59:30:f1:e2:64:79:5e:23:3e:10:24:9d:0f:42:22:
                    a9:ac:2c:ec:67:0a:9d:97:4a:04:f6:4c:c4:3e:42:
                    54:2e:25:0e:34:a0:9c:55:78:f4:a7:98:ef:5e:21:
                    da:58:3f:da:8b:ae:cf:44:d3:8d:91:75:95:9b:da:
                    30:07:6e:41:08:89:2d:61:d3:6d:56:eb:dd:b0:74:
                    25:0f:fa:3e:0a:0b:07:b9:5e:3e:9e:e1:b9:20:19:
                    5f:09:f1:b3:8b:6c:3b:fe:19:99:f4:d1:82:c0:be:
                    de:45:c9:7b:63:87:8f:18:34:3f:a1:3f:47:b3:79:
                    47:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FD:A8:5B:DA:CE:B2:DC:CE:0E:E0:D7:49:D8:06:49:9E:55:DC:ED
            X509v3 Authority Key Identifier:
                keyid:B3:85:A7:11:7D:54:09:14:30:FD:A0:C9:EC:82:3C:3F:61:27:14:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/67/B385A7117D54091430FDA0C9EC823C3F6127140D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WnEX1UCRQw_aDJ7II8P2EnFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/67/B385A7117D54091430FDA0C9EC823C3F6127140D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:41:76:ba:23:15:2d:b4:54:cc:78:2a:d4:51:1c:23:62:bf:
         74:b4:73:d8:94:63:0b:ca:c4:00:ea:6b:c9:bf:0c:27:c6:b4:
         ff:60:7b:0e:74:44:b4:e5:bd:79:ec:f7:5e:ea:ec:48:54:20:
         f3:9f:8a:7e:da:f0:20:cb:7d:b6:e4:6e:85:bd:d9:98:66:f8:
         56:3e:f2:c8:05:8c:19:d9:15:13:7e:7b:9a:3c:49:62:dd:13:
         cc:f5:62:80:65:74:b9:7c:a8:19:72:f6:39:df:43:cd:0f:02:
         48:a4:9d:d2:bd:7a:d7:13:14:56:32:38:b3:2a:8f:0a:7f:ae:
         70:bb:7c:74:93:2b:77:08:c8:17:cf:1f:f4:b0:cf:e1:fa:dc:
         f5:a4:76:00:19:90:5f:06:4c:22:d7:ee:a4:27:63:fc:d9:9d:
         5c:a8:e7:19:62:30:05:28:b8:e7:65:a3:91:56:b4:6c:64:15:
         cf:f3:24:ca:0d:da:a0:b1:ff:5e:b6:69:cf:79:fc:11:db:5b:
         f7:87:5c:ae:00:2c:cf:29:7e:3b:57:ca:96:a8:67:aa:dd:01:
         94:20:98:dc:9e:4f:4b:52:25:7c:a5:fa:5f:7f:e4:5d:18:b8:
         12:25:9c:74:16:74:2c:62:a4:35:77:c4:d3:be:17:54:96:f1:
         db:41:e1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----