Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/78/C33D2418B3C0F42E9804416757714E24A96CA3A9.mft
File:                     C33D2418B3C0F42E9804416757714E24A96CA3A9.mft (raw, json)
Hash identifier:          APDSa0Mme2gKQQ3XrumNeTgX9dfRG58NcPe4i8uCWyA=
Subject key identifier:   D0:CC:58:CD:EA:F1:C0:B7:8E:B4:B6:0E:43:F9:97:2F:BB:32:42:A4
Authority key identifier: C3:3D:24:18:B3:C0:F4:2E:98:04:41:67:57:71:4E:24:A9:6C:A3:A9
Certificate issuer:       /CN=c33d2418b3c0f42e9804416757714e24a96ca3a9
Certificate serial:       0F00811652208CE48AD02640C7FD3D1410159351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wz0kGLPA9C6YBEFnV3FOJKlso6k.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/78/C33D2418B3C0F42E9804416757714E24A96CA3A9.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 10:46:00 +0000
Manifest this update:     Tue 02 Mar 2021 10:41:00 +0000
Manifest next update:     Wed 03 Mar 2021 10:46:00 +0000
Files and hashes:         1: C33D2418B3C0F42E9804416757714E24A96CA3A9.crl (hash: osz6KjmJlRuDXWdUoJ4M3WtZH47aSepU4ZOzuu6VBtE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:00:81:16:52:20:8c:e4:8a:d0:26:40:c7:fd:3d:14:10:15:93:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33d2418b3c0f42e9804416757714e24a96ca3a9
        Validity
            Not Before: Mar  2 10:41:00 2021 GMT
            Not After : Mar  9 10:46:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:88:22:bc:aa:6b:ca:a2:4c:91:69:42:8b:a4:
                    5c:0f:27:22:8c:5c:4d:be:89:66:84:3c:aa:44:eb:
                    bd:24:87:2f:1d:34:1a:e9:e0:1c:83:68:8b:54:a2:
                    b7:11:f8:6a:e4:0f:84:a7:2e:05:e0:b7:03:ae:ba:
                    d0:a7:77:dc:85:1e:cc:f3:e8:d3:b4:59:11:81:f4:
                    23:42:63:6b:a0:c3:bd:6e:22:2c:94:eb:95:26:ee:
                    29:c1:62:f3:c5:b7:17:65:a8:2d:0f:e2:2f:36:28:
                    84:8a:f7:ec:32:05:b8:d5:bf:5d:3f:51:14:ff:32:
                    4b:01:36:85:c3:2a:aa:b1:1d:ac:df:50:81:d7:24:
                    07:c6:01:90:df:5f:19:57:3c:5f:ff:11:4f:65:d3:
                    74:25:c9:6e:ff:04:c4:95:a5:5d:81:65:8a:d9:ac:
                    d0:af:ea:b1:17:7a:7b:d0:8f:11:48:be:d4:99:33:
                    a2:0b:37:62:fb:85:73:36:7c:fc:81:e1:28:13:1b:
                    71:2e:a9:40:c4:ef:62:69:76:c8:b1:03:32:e5:d5:
                    fc:3b:e9:69:7c:dc:88:3d:c9:0d:32:e7:9f:e7:b6:
                    d5:83:08:4d:e4:47:d9:9d:d8:70:52:7d:cd:00:93:
                    20:c6:ec:89:4e:3b:c6:f4:25:8c:7b:3a:07:2c:01:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CC:58:CD:EA:F1:C0:B7:8E:B4:B6:0E:43:F9:97:2F:BB:32:42:A4
            X509v3 Authority Key Identifier:
                keyid:C3:3D:24:18:B3:C0:F4:2E:98:04:41:67:57:71:4E:24:A9:6C:A3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/78/C33D2418B3C0F42E9804416757714E24A96CA3A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz0kGLPA9C6YBEFnV3FOJKlso6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/78/C33D2418B3C0F42E9804416757714E24A96CA3A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d3:10:e8:39:eb:8d:59:7e:28:cb:fc:49:ec:03:4c:60:0b:
         a1:05:4a:ad:75:9a:64:18:64:a6:60:11:c9:27:70:b7:81:40:
         e7:47:ba:e4:c5:03:7a:17:b3:e6:b8:74:2e:14:b5:11:a6:01:
         ef:f9:7f:d8:12:fe:c7:a1:c3:44:a1:b0:9f:c2:83:60:06:38:
         92:2a:8a:b2:47:40:8c:1e:e3:58:b3:28:84:01:19:2f:7e:5a:
         84:45:91:ad:b2:d9:29:ec:38:b7:3a:59:75:69:bc:92:8d:66:
         55:f5:8a:74:3d:b7:f3:6d:b1:57:3c:54:4d:a3:69:1d:1d:9d:
         87:31:72:bd:a7:dc:8a:9a:80:25:b9:3b:57:f7:f6:b4:e7:cb:
         7d:d2:25:19:42:5d:1f:32:b0:97:3f:93:9d:d5:84:92:b7:45:
         87:a5:e3:41:eb:59:af:7c:d8:67:64:53:4c:d8:16:7c:c9:6f:
         99:f9:e5:c2:76:d8:40:e8:f4:f4:b4:ea:97:0e:5c:0d:75:97:
         cb:6a:0e:e2:81:90:67:4a:d5:d7:8f:1b:c1:21:9a:e2:23:69:
         32:2e:d5:ff:55:bb:f6:1f:c8:1a:02:e2:5c:9c:5d:19:f9:d2:
         15:e5:a4:b7:92:53:12:46:17:78:d5:00:54:ae:04:04:2f:e1:
         99:4d:19:15
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUDwCBFlIgjOSK0CZAx/09FBAVk1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzMzZDI0MThiM2MwZjQyZTk4MDQ0MTY3NTc3MTRlMjRh
OTZjYTNhOTAeFw0yMTAzMDIxMDQxMDBaFw0yMTAzMDkxMDQ2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjU4ODIyQkNBQTZCQ0FBMjRD
OTE2OTQyOEJBNDVDMEYyNzIyOEM1QzREQkU4OTY2ODQzQ0FBNDRFQkJEMjQ4NzJG
MUQzNDFBRTlFMDFDODM2ODhCNTRBMkI3MTFGODZBRTQwRjg0QTcyRTA1RTBCNzAz
QUVCQUQwQTc3N0RDODUxRUNDRjNFOEQzQjQ1OTExODFGNDIzNDI2MzZCQTBDM0JE
NkUyMjJDOTRFQjk1MjZFRTI5QzE2MkYzQzVCNzE3NjVBODJEMEZFMjJGMzYyODg0
OEFGN0VDMzIwNUI4RDVCRjVEM0Y1MTE0RkYzMjRCMDEzNjg1QzMyQUFBQjExREFD
REY1MDgxRDcyNDA3QzYwMTkwREY1RjE5NTczQzVGRkYxMTRGNjVEMzc0MjVDOTZF
RkYwNEM0OTVBNTVEODE2NThBRDlBQ0QwQUZFQUIxMTc3QTdCRDA4RjExNDhCRUQ0
OTkzM0EyMEIzNzYyRkI4NTczMzY3Q0ZDODFFMTI4MTMxQjcxMkVBOTQwQzRFRjYy
Njk3NkM4QjEwMzMyRTVENUZDM0JFOTY5N0NEQzg4M0RDOTBEMzJFNzlGRTdCNkQ1
ODMwODRERTQ0N0Q5OUREODcwNTI3RENEMDA5MzIwQzZFQzg5NEUzQkM2RjQyNThD
N0IzQTA3MkMwMTMxRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA9YgivKpryqJMkWlCi6RcDycijFxNvolmhDyqROu9JIcvHTQa6eAc
g2iLVKK3Efhq5A+Epy4F4LcDrrrQp3fchR7M8+jTtFkRgfQjQmNroMO9biIslOuV
Ju4pwWLzxbcXZagtD+IvNiiEivfsMgW41b9dP1EU/zJLATaFwyqqsR2s31CB1yQH
xgGQ318ZVzxf/xFPZdN0Jclu/wTElaVdgWWK2azQr+qxF3p70I8RSL7UmTOiCzdi
+4VzNnz8geEoExtxLqlAxO9iaXbIsQMy5dX8O+lpfNyIPckNMuef57bVgwhN5EfZ
ndhwUn3NAJMgxuyJTjvG9CWMezoHLAEx0QIDAQABo4IB/TCCAfkwHQYDVR0OBBYE
FNDMWM3q8cC3jrS2DkP5ly+7MkKkMB8GA1UdIwQYMBaAFMM9JBizwPQumARBZ1dx
TiSpbKOpMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC83OC9DMzNE
MjQxOEIzQzBGNDJFOTgwNDQxNjc1NzcxNEUyNEE5NkNBM0E5LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3owa0dMUEE5QzZZQkVGblYzRk9KS2xzbzZrLmNlcjB7
BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0Lzc4L0MzM0QyNDE4QjNDMEY0MkU5
ODA0NDE2NzU3NzE0RTI0QTk2Q0EzQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCj0xDoOeuNWX4oy/xJ
7ANMYAuhBUqtdZpkGGSmYBHJJ3C3gUDnR7rkxQN6F7PmuHQuFLURpgHv+X/YEv7H
ocNEobCfwoNgBjiSKoqyR0CMHuNYsyiEARkvflqERZGtstkp7Di3Oll1abySjWZV
9Yp0PbfzbbFXPFRNo2kdHZ2HMXK9p9yKmoAluTtX9/a058t90iUZQl0fMrCXP5Od
1YSSt0WHpeNB61mvfNhnZFNM2BZ8yW+Z+eXCdthA6PT0tOqXDlwNdZfLag7igZBn
StXXjxvBIZriI2kyLtX/Vbv2H8gaAuJcnF0Z+dIV5aS3klMSRhd41QBUrgQEL+GZ
TRkV
-----END CERTIFICATE-----