Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/91/F6AFA7B1A94FF5577F4A006792810C27AC1B4F2E.mft
File:                     F6AFA7B1A94FF5577F4A006792810C27AC1B4F2E.mft (raw, json)
Hash identifier:          0fDBPCHIbixMoInGeTmMLLURK5BDKH+WwolZt6Cssho=
Subject key identifier:   D9:10:92:3C:52:14:EC:E6:D4:7C:F7:94:07:1A:B7:1D:D0:7E:75:E9
Authority key identifier: F6:AF:A7:B1:A9:4F:F5:57:7F:4A:00:67:92:81:0C:27:AC:1B:4F:2E
Certificate issuer:       /CN=f6afa7b1a94ff5577f4a006792810c27ac1b4f2e
Certificate serial:       7B9A3C935358CD163EAC0A943A549E627DB8289C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q-nsalP9Vd_SgBnkoEMJ6wbTy4.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/91/F6AFA7B1A94FF5577F4A006792810C27AC1B4F2E.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 13:44:00 +0000
Manifest this update:     Tue 02 Mar 2021 13:39:00 +0000
Manifest next update:     Wed 03 Mar 2021 13:44:00 +0000
Files and hashes:         1: 322e35382e38322e302f32342d3234203d3e20323132373434.roa (hash: 8uA5E1YRUzMjTKxwNojYLWbMZ0Etq9CBDjESBsG3I4s=)
                          2: F6AFA7B1A94FF5577F4A006792810C27AC1B4F2E.crl (hash: XbyewT+LmcRCLODR7dJpphD7P37IAcT4+Rwo4iBFzt8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9a:3c:93:53:58:cd:16:3e:ac:0a:94:3a:54:9e:62:7d:b8:28:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6afa7b1a94ff5577f4a006792810c27ac1b4f2e
        Validity
            Not Before: Mar  2 13:39:00 2021 GMT
            Not After : Mar  9 13:44:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:e9:da:25:71:c5:cc:ca:7c:3a:69:2b:20:
                    03:53:09:6f:a7:52:75:c9:b5:d4:4c:0a:a3:20:5f:
                    9a:60:1e:49:78:6e:da:c4:8c:83:a3:53:66:63:0b:
                    4d:a9:5d:a6:d6:47:90:18:3b:43:41:80:ca:8c:d8:
                    2f:24:3c:a7:d1:ea:b5:cb:5b:25:83:ce:58:97:cd:
                    33:64:07:f6:6e:8e:6b:24:94:6a:37:23:97:58:94:
                    08:dc:db:63:3b:d1:c0:49:35:0f:4d:60:a2:8e:2d:
                    b7:75:47:53:19:6d:b4:63:22:a4:72:d8:65:a6:14:
                    4f:d6:e3:0f:b3:64:00:88:63:12:ab:00:80:40:84:
                    85:62:a4:28:bd:d2:41:7c:89:b5:a1:b9:34:46:42:
                    40:05:65:a4:34:70:3e:1e:9c:5b:4d:2a:38:b1:fd:
                    f2:3d:48:ab:ab:9d:ac:e7:c0:b9:09:0d:1e:dd:b2:
                    d1:21:c1:7b:42:75:fd:af:44:c7:44:07:d5:4f:2d:
                    e7:99:1d:0f:33:3b:02:40:89:a3:7d:76:37:f7:55:
                    c6:73:53:d7:84:7d:26:b8:4a:50:a6:73:d1:9e:45:
                    66:e5:70:db:e4:e8:df:1a:ce:dd:19:3e:32:9a:0a:
                    07:cb:a8:db:8f:e2:bb:52:23:98:98:a1:cc:6c:c6:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:10:92:3C:52:14:EC:E6:D4:7C:F7:94:07:1A:B7:1D:D0:7E:75:E9
            X509v3 Authority Key Identifier:
                keyid:F6:AF:A7:B1:A9:4F:F5:57:7F:4A:00:67:92:81:0C:27:AC:1B:4F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/91/F6AFA7B1A94FF5577F4A006792810C27AC1B4F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q-nsalP9Vd_SgBnkoEMJ6wbTy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/91/F6AFA7B1A94FF5577F4A006792810C27AC1B4F2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b5:1a:79:de:e8:43:fd:29:61:03:d6:df:d5:55:c9:3e:22:
         29:82:ff:27:c5:0f:6d:ed:80:2e:bc:f1:ae:77:fa:ca:2c:39:
         5b:e6:5a:e6:c6:54:6d:4a:c2:54:17:ef:2f:e9:35:97:a3:c9:
         af:e1:4d:f1:5b:eb:04:17:7a:b5:55:55:65:4c:bc:66:88:9b:
         63:20:25:4a:29:0d:ef:da:e4:58:c0:ea:37:6f:93:71:54:41:
         24:2a:b3:ea:1c:06:3b:38:d0:83:a9:6e:f1:d3:02:1e:8d:db:
         69:e2:14:0c:82:e9:a1:c3:27:2f:72:eb:5d:74:97:9a:cb:e9:
         7e:28:59:c2:23:fa:c8:40:62:7e:e4:06:ba:9f:4e:86:c9:19:
         d8:89:c9:f8:7b:08:db:ff:8c:96:3e:cf:7b:20:70:e2:32:9e:
         5d:f7:d9:51:70:2b:72:bd:10:f1:59:ac:99:45:e0:08:23:99:
         fb:ba:3c:87:3d:46:bd:8c:e9:e4:83:7f:e2:fb:37:fc:ed:78:
         28:fd:d4:82:1b:9f:65:4f:e6:bf:b9:b7:62:b0:3b:b7:d8:91:
         fe:7a:33:8a:8c:6c:0e:77:1c:70:90:1e:b4:25:9c:8f:a7:bd:
         62:4b:21:60:1f:42:2e:3e:39:bd:2e:6d:55:ad:ac:68:37:44:
         7c:fc:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----