Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/80/5164AFFB456C86E0C155AE30A29CEDD28570D80A.mft
File:                     5164AFFB456C86E0C155AE30A29CEDD28570D80A.mft (raw, json)
Hash identifier:          ieIKhtDmZryedj13gH0jVuFIN0ApQrC6qSj/NGyGr4s=
Subject key identifier:   FD:FE:B8:50:2D:29:00:68:14:73:4E:7A:E9:AA:C9:B3:AD:72:E9:64
Authority key identifier: 51:64:AF:FB:45:6C:86:E0:C1:55:AE:30:A2:9C:ED:D2:85:70:D8:0A
Certificate issuer:       /CN=5164affb456c86e0c155ae30a29cedd28570d80a
Certificate serial:       400420495A6462BDC899B526D0D2B2A6854CD8BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWSv-0VshuDBVa4wopzt0oVw2Ao.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/80/5164AFFB456C86E0C155AE30A29CEDD28570D80A.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 10:56:01 +0000
Manifest this update:     Tue 02 Mar 2021 10:51:01 +0000
Manifest next update:     Wed 03 Mar 2021 10:56:01 +0000
Files and hashes:         1: 5164AFFB456C86E0C155AE30A29CEDD28570D80A.crl (hash: Y97gCUsFAO93WL7iL0ymSJpmNaPwCUysh3UdqaPnpRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:04:20:49:5a:64:62:bd:c8:99:b5:26:d0:d2:b2:a6:85:4c:d8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5164affb456c86e0c155ae30a29cedd28570d80a
        Validity
            Not Before: Mar  2 10:51:01 2021 GMT
            Not After : Mar  9 10:56:01 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ef:2b:11:a7:71:ec:29:ce:57:f2:fa:e3:59:
                    6b:e0:cf:ab:e6:2d:f3:39:05:ce:70:c4:a7:5e:a4:
                    1d:83:c5:ff:f6:ea:74:91:cf:e6:f5:2c:de:f4:f4:
                    d8:13:10:a4:f2:d7:26:29:c2:14:58:d1:40:9d:db:
                    56:81:6b:f0:d7:1f:69:3c:2a:4f:87:8a:14:88:ba:
                    8d:46:ee:53:45:3d:a2:c3:0c:bf:fc:ad:45:2d:98:
                    6d:6e:de:3b:29:a7:e6:20:c8:55:98:7d:4f:14:36:
                    63:d8:dc:86:e6:82:8d:68:7f:c5:49:2d:64:e4:94:
                    66:7c:97:de:c2:ba:37:1d:c2:9b:0a:2b:bb:95:88:
                    10:29:e3:19:71:b2:53:c9:51:19:6e:8e:e2:a7:35:
                    96:74:3d:63:63:c5:78:83:33:0b:a0:88:c8:c9:81:
                    aa:eb:1e:5c:84:1e:7e:ae:fd:c0:4d:32:79:93:4d:
                    1d:e1:a0:79:c5:b5:64:2f:85:32:53:be:a9:76:0f:
                    e7:49:e3:81:7b:b7:9c:bb:d1:85:d5:56:48:6c:c9:
                    56:04:aa:9e:5b:e0:45:13:8e:09:71:67:85:92:2a:
                    22:b8:54:2f:98:04:db:af:02:0f:d7:80:0f:32:f9:
                    5b:cd:d7:ac:52:eb:8d:e4:fc:f3:be:7f:ef:1a:60:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FE:B8:50:2D:29:00:68:14:73:4E:7A:E9:AA:C9:B3:AD:72:E9:64
            X509v3 Authority Key Identifier:
                keyid:51:64:AF:FB:45:6C:86:E0:C1:55:AE:30:A2:9C:ED:D2:85:70:D8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/80/5164AFFB456C86E0C155AE30A29CEDD28570D80A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWSv-0VshuDBVa4wopzt0oVw2Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/80/5164AFFB456C86E0C155AE30A29CEDD28570D80A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e9:df:8f:15:0f:f7:26:bc:64:d0:98:97:6a:0c:e5:49:b4:
         93:19:09:25:c3:74:b7:fb:8a:13:11:20:4d:45:ad:be:a4:7b:
         13:14:b1:67:8a:25:e2:f7:c8:03:0e:29:7e:25:aa:da:43:8c:
         6b:d2:be:a3:99:25:fb:0e:5c:59:69:70:de:dd:ab:a5:2d:ef:
         58:ef:34:f0:cb:ee:59:e1:49:26:6c:8f:08:3e:dd:16:8c:dd:
         b1:a7:27:3f:6e:bc:fe:1b:0b:75:7d:29:0a:c0:80:d0:ef:25:
         9d:ff:33:2d:f4:8a:5c:42:ba:c7:51:9c:7f:01:6e:44:fd:9e:
         f5:71:e1:69:ea:28:af:6e:0e:2b:ee:0b:2c:bb:ac:1d:79:62:
         be:46:87:94:46:cd:46:1a:a4:9d:28:4a:70:ff:ec:9a:3a:4e:
         e2:0c:4d:dd:43:1d:1d:c0:c6:bb:02:f7:38:11:2d:61:b8:90:
         7a:49:d9:7f:34:9f:25:88:6a:ab:98:ff:c0:91:e4:9b:40:33:
         6e:60:07:2f:c7:d0:49:88:06:a7:88:3c:3e:b2:5f:63:3c:43:
         1e:c7:0f:72:60:a0:2d:58:9b:e1:14:e4:f5:1d:15:10:41:7e:
         83:10:c4:0e:10:5d:63:c9:37:28:e4:b1:68:b2:76:5d:12:e6:
         cf:d4:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----