Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/70/387F5096B2D2F2435AEB240884C51EC0A7058652.mft
File:                     387F5096B2D2F2435AEB240884C51EC0A7058652.mft (raw, json)
Hash identifier:          ++iozAHrUw0xFAYdFE5/Atxjl9ugLE6MXKsXGrZgz9I=
Subject key identifier:   BA:F3:28:8C:C2:B0:BE:E9:2D:FD:C7:3D:6E:FE:0A:39:29:11:22:AD
Authority key identifier: 38:7F:50:96:B2:D2:F2:43:5A:EB:24:08:84:C5:1E:C0:A7:05:86:52
Certificate issuer:       /CN=387f5096b2d2f2435aeb240884c51ec0a7058652
Certificate serial:       0101E372CA1CF1BDC2DCB97E6AA2F1203F3622B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OH9QlrLS8kNa6yQIhMUewKcFhlI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/70/387F5096B2D2F2435AEB240884C51EC0A7058652.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 10:34:00 +0000
Manifest this update:     Tue 02 Mar 2021 10:29:00 +0000
Manifest next update:     Wed 03 Mar 2021 10:34:00 +0000
Files and hashes:         1: 387F5096B2D2F2435AEB240884C51EC0A7058652.crl (hash: kftnLXc7GUqRcMvd8qxYfsqlChGteEQDnGMiCM4Wces=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:01:e3:72:ca:1c:f1:bd:c2:dc:b9:7e:6a:a2:f1:20:3f:36:22:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387f5096b2d2f2435aeb240884c51ec0a7058652
        Validity
            Not Before: Mar  2 10:29:00 2021 GMT
            Not After : Mar  9 10:34:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:59:db:25:43:b2:ab:e5:34:4f:56:2d:eb:
                    f8:2e:8a:e3:8b:ec:a6:e9:2f:17:42:27:14:97:43:
                    6a:81:bc:4a:34:61:46:8f:df:7e:8a:06:81:b7:82:
                    1c:4d:d9:02:29:43:b2:29:ae:10:65:50:f1:b7:12:
                    e3:4f:f3:ed:24:0a:64:b8:9f:76:9e:de:e9:cb:51:
                    92:54:2e:ff:cb:e4:60:27:e5:e8:7d:f3:31:ac:ad:
                    15:16:fb:80:ca:e8:22:14:31:d5:30:52:52:0f:77:
                    9d:8d:6c:4e:03:15:87:7b:50:c9:60:89:58:b3:b9:
                    26:c0:a0:98:46:48:c8:7b:ea:13:a2:cb:a5:f5:8a:
                    68:d1:0e:4f:16:13:92:5d:19:c5:d3:0c:65:f4:c7:
                    76:32:df:b6:84:21:c2:22:03:3d:00:7b:9d:4a:11:
                    13:25:24:88:e0:c9:e2:4a:68:8b:bb:80:33:27:37:
                    74:26:5f:fe:b0:cf:dc:b6:7a:4e:a9:ba:55:60:8d:
                    70:56:2c:d1:38:13:60:3d:17:7c:cd:1c:24:79:e8:
                    47:80:99:0e:42:d0:1f:2f:78:e9:bb:e2:12:d1:67:
                    1a:d4:86:62:13:02:ee:0a:4a:9c:64:d1:a9:0c:e4:
                    9a:38:ff:c9:e0:55:99:42:91:0f:60:f1:1b:51:2e:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F3:28:8C:C2:B0:BE:E9:2D:FD:C7:3D:6E:FE:0A:39:29:11:22:AD
            X509v3 Authority Key Identifier:
                keyid:38:7F:50:96:B2:D2:F2:43:5A:EB:24:08:84:C5:1E:C0:A7:05:86:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/70/387F5096B2D2F2435AEB240884C51EC0A7058652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH9QlrLS8kNa6yQIhMUewKcFhlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/70/387F5096B2D2F2435AEB240884C51EC0A7058652.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d5:c3:aa:65:4a:d6:96:dd:e3:56:b3:8f:e4:98:67:47:09:
         19:b9:29:04:3f:8a:de:4c:3f:40:f8:58:fa:aa:33:e5:0a:1e:
         4b:cd:6a:fd:76:43:3d:bc:da:fc:b5:56:3c:5c:d2:0e:f6:a4:
         2f:9c:df:69:ca:ab:65:c4:47:04:f1:65:21:f6:16:5a:d2:8c:
         99:47:56:48:93:6d:6a:91:9e:45:1a:a9:ad:82:be:b7:de:f8:
         57:0b:d4:8c:90:c8:1e:a9:e8:e4:8e:2f:86:8d:da:1c:47:c9:
         25:eb:e7:4b:40:8b:2f:c7:9a:7c:6b:14:b7:3c:73:da:35:5a:
         fd:2b:1b:4e:3d:4d:a7:4d:79:e8:6d:35:c2:d8:3e:66:64:f5:
         56:84:d9:00:88:ab:ab:e9:22:1d:e6:a9:3e:2d:f9:33:34:45:
         73:0a:1d:b9:6e:d3:33:1d:76:f6:a5:e1:f9:0d:66:bd:5e:ab:
         66:c8:0b:fe:56:4e:61:0b:ca:2d:00:99:66:02:3d:7d:bb:62:
         22:80:20:4b:18:b8:b3:db:df:81:9f:e9:32:9e:45:c0:2e:99:
         d9:c9:c1:54:b2:ca:cc:de:48:1a:c0:f3:a8:5b:cf:d1:6e:c0:
         ed:97:5e:5d:45:4b:c5:d8:da:ba:95:f3:0e:d1:6c:82:fa:03:
         86:aa:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----