Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/81/AE99F7A676C12B1CEBE350580B4C5CD4AB286B74.mft
File:                     AE99F7A676C12B1CEBE350580B4C5CD4AB286B74.mft (raw, json)
Hash identifier:          AUOn5SwCdC0bVh4az7qQbpGPmhXPr0osLevQPPdojLc=
Subject key identifier:   3E:9F:CB:79:65:F8:36:D0:56:0A:7D:EE:CF:9F:D1:B9:D5:29:09:18
Authority key identifier: AE:99:F7:A6:76:C1:2B:1C:EB:E3:50:58:0B:4C:5C:D4:AB:28:6B:74
Certificate issuer:       /CN=ae99f7a676c12b1cebe350580b4c5cd4ab286b74
Certificate serial:       37267FAA1C433C196B38E646EE9D1D5880CBEB4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpn3pnbBKxzr41BYC0xc1Ksoa3Q.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/81/AE99F7A676C12B1CEBE350580B4C5CD4AB286B74.mft
Manifest number:          8B
Signing time:             Tue 02 Mar 2021 17:54:00 +0000
Manifest this update:     Tue 02 Mar 2021 17:49:00 +0000
Manifest next update:     Wed 03 Mar 2021 17:54:00 +0000
Files and hashes:         1: AE99F7A676C12B1CEBE350580B4C5CD4AB286B74.crl (hash: ac5ANcxu1+Vsgx/I1xqmzIZ0O5S4cjax75noYnBwYT4=)
                          2: 3138352e3139332e31362e302f32342d3234203d3e203230343733.roa (hash: kfPFseV6bshm99T2TfVXPU2O7hxNXd4M0IjdRquIToU=)
                          3: 3138352e3139332e31362e302f32342d3234203d3e203631333137.roa (hash: NTp3GeCdqLX3GHFUEaergNldWhgETtEh1hHpkCIybhU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:26:7f:aa:1c:43:3c:19:6b:38:e6:46:ee:9d:1d:58:80:cb:eb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae99f7a676c12b1cebe350580b4c5cd4ab286b74
        Validity
            Not Before: Mar  2 17:49:00 2021 GMT
            Not After : Mar  9 17:54:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:0d:cb:55:c0:ff:e3:7e:df:f4:10:81:a9:
                    db:05:ee:3e:e6:95:34:da:91:5c:d6:69:d7:0c:0f:
                    c7:b3:b5:59:87:89:b8:60:7e:fb:d2:d9:f3:c8:f1:
                    18:00:f3:a9:ea:19:25:d4:af:7d:04:07:43:6d:e1:
                    a3:01:a5:5e:73:79:92:0a:6a:c5:21:e4:c9:e3:bd:
                    a4:bf:fb:7e:ee:b8:6e:9b:93:13:f2:00:98:2b:ca:
                    f8:5c:60:bb:df:0e:75:0f:af:2f:35:2e:79:3f:3c:
                    a3:bb:dc:d1:33:ca:22:c3:08:85:09:79:5d:08:db:
                    d5:a0:28:b6:7b:72:a1:1f:42:ca:bc:a0:81:a4:37:
                    c2:c8:4c:f0:5d:d7:f5:27:81:e1:aa:40:58:6d:5b:
                    c3:0f:15:03:aa:f4:bf:9b:5c:54:33:44:44:6b:70:
                    ca:51:ff:9f:2f:2e:c3:5f:a9:92:27:2f:a4:f2:2a:
                    8b:a9:61:1a:c8:08:e8:d9:5d:f7:df:0d:fb:99:01:
                    e3:0e:66:0a:54:d1:bf:57:bf:ce:39:56:64:9b:24:
                    e3:be:40:bb:e5:a1:f9:d6:d9:e3:37:30:f1:bf:5e:
                    01:40:45:14:40:66:9f:09:1e:d9:92:85:f0:ec:6a:
                    32:36:30:b1:d2:71:5b:a3:1a:e6:92:2e:62:cb:85:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9F:CB:79:65:F8:36:D0:56:0A:7D:EE:CF:9F:D1:B9:D5:29:09:18
            X509v3 Authority Key Identifier:
                keyid:AE:99:F7:A6:76:C1:2B:1C:EB:E3:50:58:0B:4C:5C:D4:AB:28:6B:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/81/AE99F7A676C12B1CEBE350580B4C5CD4AB286B74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpn3pnbBKxzr41BYC0xc1Ksoa3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/81/AE99F7A676C12B1CEBE350580B4C5CD4AB286B74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:d1:0b:a8:28:eb:28:0b:c3:81:99:f1:67:39:6a:fc:3c:
         57:ec:3f:99:c0:5c:1f:8b:22:fd:01:a9:60:b7:d1:1d:86:44:
         0c:3f:e3:73:e2:12:f0:d7:05:2f:73:44:e9:62:28:1d:8c:09:
         30:11:b2:24:c5:ab:60:8c:5a:f5:7b:19:d0:5f:6a:7a:35:67:
         00:10:f1:3e:b8:86:d7:29:52:59:11:5c:02:56:f6:cb:f7:26:
         97:23:24:ea:a1:66:ec:4a:9d:68:33:16:2c:6f:10:5a:7f:89:
         94:a7:35:40:d9:03:ce:d3:4f:ea:d0:cf:53:d2:32:67:9c:3b:
         f3:2c:bc:4a:18:ca:44:b3:51:7f:ab:0b:d2:3b:67:e9:cc:03:
         2b:20:f7:00:a1:cc:31:2b:a2:ea:0b:54:d5:9e:5f:4e:48:9a:
         63:86:b3:2e:21:fe:4a:4f:08:69:61:6d:42:f4:1e:d9:a1:1a:
         55:07:72:fc:3d:5e:99:33:87:2d:9d:ce:1f:cd:3a:aa:dd:65:
         a2:10:d0:d2:3c:a9:2a:1c:b7:a8:f0:5e:02:80:0e:de:e2:c1:
         8b:d1:5f:61:a6:bc:15:b4:7d:82:34:a8:33:03:19:06:2d:0a:
         37:c3:45:bd:83:26:69:2a:bd:14:87:74:ee:bd:81:58:1c:8c:
         02:83:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----