Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/72/67CDC13DEA8CDAEFDD54C03B29A5BD901021FFDE.mft
File:                     67CDC13DEA8CDAEFDD54C03B29A5BD901021FFDE.mft (raw, json)
Hash identifier:          mtcFXZ/QveN/PRgKgWoEZGsEjRSBPdNhfklGkA5WWOM=
Subject key identifier:   68:22:10:71:D3:22:8E:37:60:00:0D:2B:96:55:53:6C:73:D5:50:25
Authority key identifier: 67:CD:C1:3D:EA:8C:DA:EF:DD:54:C0:3B:29:A5:BD:90:10:21:FF:DE
Certificate issuer:       /CN=67cdc13dea8cdaefdd54c03b29a5bd901021ffde
Certificate serial:       29DE357DE6083C6A95E19CA0E4B59DA417227613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z83BPeqM2u_dVMA7KaW9kBAh_94.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/72/67CDC13DEA8CDAEFDD54C03B29A5BD901021FFDE.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 10:42:00 +0000
Manifest this update:     Tue 02 Mar 2021 10:37:00 +0000
Manifest next update:     Wed 03 Mar 2021 10:42:00 +0000
Files and hashes:         1: 67CDC13DEA8CDAEFDD54C03B29A5BD901021FFDE.crl (hash: hLD5UQjhcnea2890bTzlEXtCYhylxhqkRevitXvo0nU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:de:35:7d:e6:08:3c:6a:95:e1:9c:a0:e4:b5:9d:a4:17:22:76:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cdc13dea8cdaefdd54c03b29a5bd901021ffde
        Validity
            Not Before: Mar  2 10:37:00 2021 GMT
            Not After : Mar  9 10:42:00 2021 GMT
        Subject: CN=3082010A0282010100D2D2F4AAE76B0F94279FA09D2C0800DC1CC74009AD003065D48C118E66AE4C201FF2727EB8CAB570AA9D8A5D6AAEF1228E2DA0A9358BEB2FA1324B17AD4341858F77CE9EC882CABDC9936E8F41A17DA532295BE1E21B6E5A8930B0AB890BDD757683679A16BE17E7AE559C7963D36069BB6722B228B5B914D354CA619618DDF1D669DCFFEA9A3344F3DD424E59C647F4B1CAF56233D4AA550FA124155C116BB3E9B0EEF25623BE72E9E36B217B38122568A4AA3882403C096DC111667F3BFA34C47B9434E16E608A939B3125057056771BC349FD6D4224FA5A8C208B38580ED05B17F64024EF76A31A51783B796BD2A9418595AD9F5113979EBE72038CE48D070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:f4:aa:e7:6b:0f:94:27:9f:a0:9d:2c:08:
                    00:dc:1c:c7:40:09:ad:00:30:65:d4:8c:11:8e:66:
                    ae:4c:20:1f:f2:72:7e:b8:ca:b5:70:aa:9d:8a:5d:
                    6a:ae:f1:22:8e:2d:a0:a9:35:8b:eb:2f:a1:32:4b:
                    17:ad:43:41:85:8f:77:ce:9e:c8:82:ca:bd:c9:93:
                    6e:8f:41:a1:7d:a5:32:29:5b:e1:e2:1b:6e:5a:89:
                    30:b0:ab:89:0b:dd:75:76:83:67:9a:16:be:17:e7:
                    ae:55:9c:79:63:d3:60:69:bb:67:22:b2:28:b5:b9:
                    14:d3:54:ca:61:96:18:dd:f1:d6:69:dc:ff:ea:9a:
                    33:44:f3:dd:42:4e:59:c6:47:f4:b1:ca:f5:62:33:
                    d4:aa:55:0f:a1:24:15:5c:11:6b:b3:e9:b0:ee:f2:
                    56:23:be:72:e9:e3:6b:21:7b:38:12:25:68:a4:aa:
                    38:82:40:3c:09:6d:c1:11:66:7f:3b:fa:34:c4:7b:
                    94:34:e1:6e:60:8a:93:9b:31:25:05:70:56:77:1b:
                    c3:49:fd:6d:42:24:fa:5a:8c:20:8b:38:58:0e:d0:
                    5b:17:f6:40:24:ef:76:a3:1a:51:78:3b:79:6b:d2:
                    a9:41:85:95:ad:9f:51:13:97:9e:be:72:03:8c:e4:
                    8d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:10:71:D3:22:8E:37:60:00:0D:2B:96:55:53:6C:73:D5:50:25
            X509v3 Authority Key Identifier:
                keyid:67:CD:C1:3D:EA:8C:DA:EF:DD:54:C0:3B:29:A5:BD:90:10:21:FF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/72/67CDC13DEA8CDAEFDD54C03B29A5BD901021FFDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z83BPeqM2u_dVMA7KaW9kBAh_94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/72/67CDC13DEA8CDAEFDD54C03B29A5BD901021FFDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d3:ba:14:f1:cc:16:b0:33:eb:cc:3a:d0:32:d4:11:00:43:
         f8:2b:90:c7:e3:eb:67:fa:61:89:e9:e2:58:4f:dc:e4:b7:87:
         42:1e:42:95:7a:a6:98:10:db:0f:7f:e1:92:7a:e9:9c:40:23:
         d4:1d:cb:79:b7:1c:05:6b:d2:1b:ca:d4:05:bf:3e:c4:f0:fe:
         c9:d4:8d:2a:3b:27:e1:96:01:59:ad:56:e9:78:66:b3:8c:76:
         26:66:c0:e9:46:c6:62:f6:c4:d3:f4:df:52:04:d9:19:ab:29:
         f9:d6:3b:17:c2:6a:fb:b5:a3:50:24:3a:a3:f4:52:a6:a3:32:
         ff:d5:20:84:7a:8a:4c:54:c4:d1:b8:f4:f3:04:df:5a:8e:8d:
         c2:48:ec:39:ab:6a:77:12:e1:d6:59:fa:2d:53:84:41:a6:a5:
         61:63:97:0e:4e:8f:fe:89:75:27:b5:be:77:35:3c:af:f1:5e:
         f3:ce:fa:25:eb:eb:8e:04:30:b9:1a:c0:2d:a8:5d:b6:04:c4:
         f6:34:df:10:7d:b4:5c:52:2d:d9:e9:e8:21:56:3c:55:f7:fc:
         f8:a1:82:b8:ec:5f:ec:9c:bc:06:84:d4:bd:38:58:35:32:32:
         ce:b0:67:d3:68:6b:b4:07:59:c4:e7:77:c0:a2:b6:bf:8b:87:
         ae:9c:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----