Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/90/3B9AED6A786DA2D39C683954F8AC478CCF1904F6.mft
File:                     3B9AED6A786DA2D39C683954F8AC478CCF1904F6.mft (raw, json)
Hash identifier:          E9A5zykSj+4edOeKm/p5WvrfwXA9Xx0lqBWHUQrE9rU=
Subject key identifier:   99:C2:1E:51:86:AF:78:08:F2:D7:7C:A6:C9:80:46:BF:74:41:0D:3F
Authority key identifier: 3B:9A:ED:6A:78:6D:A2:D3:9C:68:39:54:F8:AC:47:8C:CF:19:04:F6
Certificate issuer:       /CN=3b9aed6a786da2d39c683954f8ac478ccf1904f6
Certificate serial:       153015EDC7E065732A7DD5B6091274BCA40075B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5rtanhtotOcaDlU-KxHjM8ZBPY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/90/3B9AED6A786DA2D39C683954F8AC478CCF1904F6.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 14:40:00 +0000
Manifest this update:     Tue 02 Mar 2021 14:35:00 +0000
Manifest next update:     Wed 03 Mar 2021 14:40:00 +0000
Files and hashes:         1: 3B9AED6A786DA2D39C683954F8AC478CCF1904F6.crl (hash: yc2YmjiAcG3FbouM2EPMqsbScyAhm5Dj5umADFn2S5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:30:15:ed:c7:e0:65:73:2a:7d:d5:b6:09:12:74:bc:a4:00:75:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b9aed6a786da2d39c683954f8ac478ccf1904f6
        Validity
            Not Before: Mar  2 14:35:00 2021 GMT
            Not After : Mar  9 14:40:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ed:a3:33:94:f6:3c:e3:f4:07:bd:6a:1c:e4:
                    ef:6b:5d:75:f9:84:93:94:23:15:e6:11:f4:83:06:
                    e0:5a:b3:10:f9:b6:91:b6:21:03:23:2e:d5:b8:f2:
                    8e:2e:78:2e:01:b8:fd:33:79:fd:d7:c8:93:e8:86:
                    8c:83:77:f9:38:54:d6:84:23:de:d1:b9:59:fe:fb:
                    96:23:4a:d9:90:29:ad:2a:c4:fe:ff:b4:dc:d3:d8:
                    cb:a1:ed:8c:ab:80:f1:bd:1e:e6:f9:12:2e:dd:64:
                    ed:6f:86:01:65:b2:eb:bf:da:d1:1d:fa:99:78:8e:
                    a8:c0:05:58:fd:35:74:ee:8d:92:e7:11:24:1a:06:
                    10:57:8f:08:44:11:19:4b:eb:78:ed:fe:93:c6:0d:
                    50:bf:ec:1f:a9:06:8f:db:15:6a:f1:af:57:46:c4:
                    ac:d6:e0:5f:c6:b0:2c:7a:bf:6e:76:28:f8:37:64:
                    d4:f7:ba:6b:0e:1e:c3:16:e0:ec:28:0e:08:a9:9d:
                    e3:29:66:b3:ba:00:32:af:4a:77:2e:a0:9d:ea:c1:
                    26:3d:57:ef:c2:21:12:08:8d:36:07:10:bd:b4:76:
                    63:70:4a:de:94:39:da:f4:35:95:61:f2:96:aa:ab:
                    39:40:95:d5:92:61:35:1f:0f:2b:e4:ab:a3:04:3d:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C2:1E:51:86:AF:78:08:F2:D7:7C:A6:C9:80:46:BF:74:41:0D:3F
            X509v3 Authority Key Identifier:
                keyid:3B:9A:ED:6A:78:6D:A2:D3:9C:68:39:54:F8:AC:47:8C:CF:19:04:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/90/3B9AED6A786DA2D39C683954F8AC478CCF1904F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5rtanhtotOcaDlU-KxHjM8ZBPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/90/3B9AED6A786DA2D39C683954F8AC478CCF1904F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:00:bd:d2:d5:60:66:7a:d5:a4:54:18:e4:34:44:66:dd:a0:
         5e:cc:5b:99:74:1c:9b:20:82:fe:28:4e:6b:0e:93:14:c6:8c:
         82:19:a3:b3:2f:2a:c9:fd:be:4c:44:e5:9f:6e:fe:df:29:3f:
         b6:cd:da:e3:6e:5c:63:18:5f:e1:84:56:43:f2:f5:82:bd:be:
         c9:9d:69:47:61:52:ed:42:97:eb:df:c8:a8:4f:ba:90:61:de:
         39:44:c4:64:51:95:d4:87:f5:3e:30:8e:5e:c4:46:9e:2f:14:
         33:75:15:52:88:e2:ad:fc:8b:0c:28:1a:ad:2c:01:55:81:36:
         b6:15:dd:3c:de:25:6e:7c:7d:14:e0:75:f3:37:fb:de:0d:38:
         d5:dd:e3:39:a7:74:f0:41:98:47:9d:95:a7:d9:19:cf:9e:da:
         4b:1d:c8:7d:94:5d:0f:31:c7:d3:95:c4:31:d3:49:03:a4:13:
         79:5e:79:ad:97:3f:5a:22:ce:2f:03:b4:1e:d2:dd:62:4d:dd:
         d4:de:28:fc:9a:08:ad:0c:35:d0:fa:c7:6a:69:e2:aa:62:d3:
         29:78:be:66:07:79:ef:4b:ff:13:de:3a:31:37:61:84:e8:e0:
         f9:41:43:3a:44:81:ea:4a:f3:ec:2e:7f:8f:ff:47:bf:df:7b:
         7c:44:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----