Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/74/48D97B5626CA24A4DC949ED76BAB826A05B6247D.mft
File:                     48D97B5626CA24A4DC949ED76BAB826A05B6247D.mft (raw, json)
Hash identifier:          yxtP45QVDoroantb/MdqTo733LfM/Wnkh4B2RAaKjvM=
Subject key identifier:   14:47:D5:2E:93:86:28:0A:7C:AE:F8:56:0D:E6:E4:9B:25:A8:15:D2
Authority key identifier: 48:D9:7B:56:26:CA:24:A4:DC:94:9E:D7:6B:AB:82:6A:05:B6:24:7D
Certificate issuer:       /CN=48d97b5626ca24a4dc949ed76bab826a05b6247d
Certificate serial:       789C696C3D24017DBC560D8D640C0C29F0554C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SNl7VibKJKTclJ7Xa6uCagW2JH0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/74/48D97B5626CA24A4DC949ED76BAB826A05B6247D.mft
Manifest number:          2A
Signing time:             Tue 29 Dec 2020 00:18:00 +0000
Manifest this update:     Tue 29 Dec 2020 00:13:00 +0000
Manifest next update:     Wed 30 Dec 2020 00:18:00 +0000
Files and hashes:         1: 48D97B5626CA24A4DC949ED76BAB826A05B6247D.crl (hash: fXvs+IBAwbqzzOiqjQGQMmp6NGZuwV0D9GmINg32MXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9c:69:6c:3d:24:01:7d:bc:56:0d:8d:64:0c:0c:29:f0:55:4c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48d97b5626ca24a4dc949ed76bab826a05b6247d
        Validity
            Not Before: Dec 29 00:13:00 2020 GMT
            Not After : Jan  5 00:18:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ed:c4:46:6b:98:9b:59:4f:d0:ce:62:8f:3f:
                    fa:cd:06:57:95:37:95:bf:05:cc:7d:6f:24:0a:18:
                    0e:18:41:fe:e8:58:f6:f7:c0:40:6d:58:df:f6:b7:
                    5a:36:57:22:da:9c:cf:3d:4e:ca:56:56:eb:26:82:
                    06:a1:42:93:92:eb:9e:4c:db:d7:51:48:03:6e:f7:
                    c7:c5:12:f5:21:99:0b:94:87:d6:5b:63:cc:a8:0d:
                    cd:c1:e4:69:00:35:a5:27:bd:f4:e7:2d:16:9d:e4:
                    0a:1a:7c:87:63:14:7e:24:64:f5:4b:cc:44:14:5f:
                    aa:af:e3:ef:45:50:6d:39:42:d0:a2:00:d3:ef:07:
                    d8:e8:3c:29:df:85:42:d8:df:73:38:8e:cb:93:f8:
                    de:ab:bb:89:04:35:10:80:db:ad:16:86:d9:5c:17:
                    20:1c:26:ca:42:46:76:62:6d:ae:82:73:29:bd:ed:
                    18:7e:14:6c:83:a6:e7:22:3d:b0:76:97:3a:2f:3d:
                    a0:7e:ff:95:11:16:43:ed:13:da:ac:e4:4b:c3:09:
                    65:c1:21:21:c1:cc:09:3d:9c:43:26:5e:41:7b:d7:
                    f1:eb:53:b3:f3:64:55:da:8a:1e:f9:5c:f1:23:0a:
                    d2:25:78:71:7f:00:11:1f:52:88:2b:0a:d9:56:02:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:47:D5:2E:93:86:28:0A:7C:AE:F8:56:0D:E6:E4:9B:25:A8:15:D2
            X509v3 Authority Key Identifier:
                keyid:48:D9:7B:56:26:CA:24:A4:DC:94:9E:D7:6B:AB:82:6A:05:B6:24:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/74/48D97B5626CA24A4DC949ED76BAB826A05B6247D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SNl7VibKJKTclJ7Xa6uCagW2JH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/74/48D97B5626CA24A4DC949ED76BAB826A05B6247D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:73:ee:39:2e:fb:03:ec:08:1d:8a:5d:14:54:2f:af:6e:d0:
         4b:1b:24:38:bd:f0:41:7b:5c:99:95:9a:85:b4:3a:ea:5d:9a:
         e9:ed:14:37:4d:ab:ca:01:61:a9:34:f0:b7:aa:b2:aa:28:e9:
         84:c9:97:24:76:d8:8d:17:5f:db:3d:6e:2d:66:75:d9:5a:a7:
         f6:11:72:08:6d:d7:d6:a6:57:fb:58:23:18:e5:28:84:6b:aa:
         79:4f:4f:38:cd:6d:4d:13:45:75:83:c1:ed:86:f5:58:dd:96:
         42:9c:1f:74:b4:6e:e4:6c:60:7d:79:07:b6:b8:85:d1:21:4e:
         55:20:05:69:6f:7c:55:e4:61:e5:3d:4b:25:88:ad:85:95:d7:
         35:38:54:25:42:43:20:76:ea:19:33:25:f7:8e:cc:68:85:cf:
         c7:30:93:84:0c:e6:8d:83:e5:00:88:1e:a6:87:ce:a0:79:fe:
         e2:a3:c6:a5:70:79:2a:03:5f:32:ec:8a:69:59:5c:43:1a:bc:
         d2:55:f3:6c:49:c4:8a:f6:b6:17:24:e6:4f:34:1b:e2:ce:02:
         e4:e3:e2:3c:c4:35:08:58:39:c1:ba:b4:ef:b1:d6:5d:b6:5c:
         f5:c1:c7:c8:9a:66:88:6f:c8:3a:8d:fc:1c:80:15:3d:c7:57:
         22:3a:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----