Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/68/D9AFEDF848BEFBA6C3B9F2BE33B3BA311F750D96.mft
File:                     D9AFEDF848BEFBA6C3B9F2BE33B3BA311F750D96.mft (raw, json)
Hash identifier:          HPWRQ7J5NE+1a4tSbLXiZSi9kplNUjBUB9kDqzdQyuE=
Subject key identifier:   88:85:D4:5C:C8:5E:82:AC:F5:70:8E:24:01:B8:FC:A9:73:CD:71:59
Authority key identifier: D9:AF:ED:F8:48:BE:FB:A6:C3:B9:F2:BE:33:B3:BA:31:1F:75:0D:96
Certificate issuer:       /CN=d9afedf848befba6c3b9f2be33b3ba311f750d96
Certificate serial:       6852DC5CBB9289F438FE2F52BB721918F0507B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a_t-Ei--6bDufK-M7O6MR91DZY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/68/D9AFEDF848BEFBA6C3B9F2BE33B3BA311F750D96.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 10:16:01 +0000
Manifest this update:     Tue 02 Mar 2021 10:11:01 +0000
Manifest next update:     Wed 03 Mar 2021 10:16:01 +0000
Files and hashes:         1: D9AFEDF848BEFBA6C3B9F2BE33B3BA311F750D96.crl (hash: jtRvclPtCYNmCjRWQLXuz6FpZT7zh2f9URzB9I4ZzGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:52:dc:5c:bb:92:89:f4:38:fe:2f:52:bb:72:19:18:f0:50:7b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9afedf848befba6c3b9f2be33b3ba311f750d96
        Validity
            Not Before: Mar  2 10:11:01 2021 GMT
            Not After : Mar  9 10:16:01 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:e4:6d:30:18:1e:46:9b:88:da:c6:a6:91:
                    cd:c3:7f:63:b1:74:9a:fa:4e:3a:1c:84:12:78:bf:
                    65:60:92:cc:da:24:3b:10:cb:5e:c8:dc:4f:64:4a:
                    1e:d2:a3:1e:aa:d9:a5:a3:f0:05:bd:4f:82:d3:2b:
                    65:82:a6:fb:04:79:9b:db:36:32:c9:12:91:5e:64:
                    61:98:13:25:f2:19:ce:33:a2:e2:07:7d:7b:00:e1:
                    c7:21:4b:3c:9e:f6:1a:b3:96:f8:99:77:7a:90:e9:
                    11:1d:a1:f5:96:5c:ad:c2:f2:0a:86:d5:a6:04:c4:
                    6c:cf:10:c7:3d:e8:21:58:80:b8:83:17:14:62:e9:
                    c9:a0:19:3e:aa:6a:a8:65:1f:9f:32:7f:10:4d:db:
                    3f:6d:17:9f:40:4a:19:ef:b4:ca:c3:d3:e8:e8:ba:
                    cd:52:84:c4:5f:51:6e:ca:53:c6:38:d6:db:6b:61:
                    02:8a:02:4e:a1:c6:aa:f7:9a:c7:9c:0c:e5:25:d5:
                    76:e9:05:0a:3e:4e:09:36:c1:ff:74:12:c2:1a:07:
                    34:f2:be:b9:78:65:1d:2b:fb:70:29:38:68:0e:9f:
                    3f:ac:8b:e5:be:90:af:7a:2e:f2:a1:f6:2d:bc:e0:
                    a7:ba:0f:d2:8a:06:06:17:5c:d7:5a:01:c8:55:dc:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:85:D4:5C:C8:5E:82:AC:F5:70:8E:24:01:B8:FC:A9:73:CD:71:59
            X509v3 Authority Key Identifier:
                keyid:D9:AF:ED:F8:48:BE:FB:A6:C3:B9:F2:BE:33:B3:BA:31:1F:75:0D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/68/D9AFEDF848BEFBA6C3B9F2BE33B3BA311F750D96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a_t-Ei--6bDufK-M7O6MR91DZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/68/D9AFEDF848BEFBA6C3B9F2BE33B3BA311F750D96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1d:c6:91:d6:cd:08:34:d8:bc:9a:3d:8f:ff:24:9f:19:4b:
         63:18:89:85:51:ec:d3:f5:61:9d:af:1f:29:8a:42:eb:ce:29:
         05:0e:9b:99:6a:cc:f8:a5:40:7f:5e:80:ab:18:46:91:a6:e7:
         56:32:22:59:ff:b1:c0:68:c6:62:c1:b5:96:a4:ae:d9:c3:6f:
         fc:2d:1b:74:61:7d:5e:2d:b4:18:c4:95:fd:92:92:ab:b7:37:
         0f:17:af:e8:b3:1c:51:07:cf:b4:42:6c:6f:ba:56:d4:0c:aa:
         5f:3d:fa:cd:d6:6d:8b:fa:40:67:28:40:03:71:a1:22:1b:2a:
         ce:29:13:08:b8:26:02:48:e0:40:eb:95:65:d4:2c:5b:72:93:
         ad:95:5b:37:f5:9b:7d:ac:c4:34:fb:9b:9c:87:6c:03:17:13:
         f4:72:2b:18:c4:39:af:b8:e6:ce:7d:51:0a:8e:62:75:0d:76:
         65:1d:bd:ed:e7:60:75:17:13:32:48:c7:52:96:0a:f0:35:a8:
         23:bf:6c:20:ef:b2:7a:24:50:b6:fb:1b:22:eb:0b:16:03:07:
         08:3a:fb:1c:5f:ce:1e:02:b7:89:f4:2e:1b:2f:4a:7f:81:43:
         fe:70:b3:bb:05:0e:33:7a:fd:cc:9a:5f:6e:65:42:24:06:95:
         90:2c:56:ed
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUaFLcXLuSifQ4/i9Su3IZGPBQe2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDlhZmVkZjg0OGJlZmJhNmMzYjlmMmJlMzNiM2JhMzEx
Zjc1MGQ5NjAeFw0yMTAzMDIxMDExMDFaFw0yMTAzMDkxMDE2MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc2RkU0NkQzMDE4MUU0NjlC
ODhEQUM2QTY5MUNEQzM3RjYzQjE3NDlBRkE0RTNBMUM4NDEyNzhCRjY1NjA5MkND
REEyNDNCMTBDQjVFQzhEQzRGNjQ0QTFFRDJBMzFFQUFEOUE1QTNGMDA1QkQ0Rjgy
RDMyQjY1ODJBNkZCMDQ3OTlCREIzNjMyQzkxMjkxNUU2NDYxOTgxMzI1RjIxOUNF
MzNBMkUyMDc3RDdCMDBFMUM3MjE0QjNDOUVGNjFBQjM5NkY4OTk3NzdBOTBFOTEx
MURBMUY1OTY1Q0FEQzJGMjBBODZENUE2MDRDNDZDQ0YxMEM3M0RFODIxNTg4MEI4
ODMxNzE0NjJFOUM5QTAxOTNFQUE2QUE4NjUxRjlGMzI3RjEwNEREQjNGNkQxNzlG
NDA0QTE5RUZCNENBQzNEM0U4RThCQUNENTI4NEM0NUY1MTZFQ0E1M0M2MzhENkRC
NkI2MTAyOEEwMjRFQTFDNkFBRjc5QUM3OUMwQ0U1MjVENTc2RTkwNTBBM0U0RTA5
MzZDMUZGNzQxMkMyMUEwNzM0RjJCRUI5Nzg2NTFEMkJGQjcwMjkzODY4MEU5RjNG
QUM4QkU1QkU5MEFGN0EyRUYyQTFGNjJEQkNFMEE3QkEwRkQyOEEwNjA2MTc1Q0Q3
NUEwMUM4NTVEQzU4NkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt2/kbTAYHkabiNrGppHNw39jsXSa+k46HIQSeL9lYJLM2iQ7EMte
yNxPZEoe0qMeqtmlo/AFvU+C0ytlgqb7BHmb2zYyyRKRXmRhmBMl8hnOM6LiB317
AOHHIUs8nvYas5b4mXd6kOkRHaH1llytwvIKhtWmBMRszxDHPeghWIC4gxcUYunJ
oBk+qmqoZR+fMn8QTds/bRefQEoZ77TKw9Po6LrNUoTEX1FuylPGONbba2ECigJO
ocaq95rHnAzlJdV26QUKPk4JNsH/dBLCGgc08r65eGUdK/twKThoDp8/rIvlvpCv
ei7yofYtvOCnug/SigYGF1zXWgHIVdxYbwIDAQABo4IB/TCCAfkwHQYDVR0OBBYE
FIiF1FzIXoKs9XCOJAG4/KlzzXFZMB8GA1UdIwQYMBaAFNmv7fhIvvumw7nyvjOz
ujEfdQ2WMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82OC9EOUFG
RURGODQ4QkVGQkE2QzNCOUYyQkUzM0IzQkEzMTFGNzUwRDk2LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmFfdC1FaS0tNmJEdWZLLU03TzZNUjkxRFpZLmNlcjB7
BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzY4L0Q5QUZFREY4NDhCRUZCQTZD
M0I5RjJCRTMzQjNCQTMxMUY3NTBEOTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuHcaR1s0INNi8mj2P
/ySfGUtjGImFUezT9WGdrx8pikLrzikFDpuZasz4pUB/XoCrGEaRpudWMiJZ/7HA
aMZiwbWWpK7Zw2/8LRt0YX1eLbQYxJX9kpKrtzcPF6/osxxRB8+0QmxvulbUDKpf
PfrN1m2L+kBnKEADcaEiGyrOKRMIuCYCSOBA65Vl1CxbcpOtlVs39Zt9rMQ0+5uc
h2wDFxP0cisYxDmvuObOfVEKjmJ1DXZlHb3t52B1FxMySMdSlgrwNagjv2wg77J6
JFC2+xsi6wsWAwcIOvscX84eAreJ9C4bL0p/gUP+cLO7BQ4zev3Mml9uZUIkBpWQ
LFbt
-----END CERTIFICATE-----