Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/94/C864CECFC2F1B959551A17962994DECF61213298.mft
File:                     C864CECFC2F1B959551A17962994DECF61213298.mft (raw, json)
Hash identifier:          EUWcnSv7DLgAwWQqfOFuKwE0Z7bARw2viPc3BEDlKk4=
Subject key identifier:   58:3D:73:61:17:51:EE:8A:AF:DF:EE:BE:A1:03:4D:94:2E:C7:7B:39
Authority key identifier: C8:64:CE:CF:C2:F1:B9:59:55:1A:17:96:29:94:DE:CF:61:21:32:98
Certificate issuer:       /CN=c864cecfc2f1b959551a17962994decf61213298
Certificate serial:       7061858D60777F3F3D103647DDD07FF19034C60E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yGTOz8LxuVlVGheWKZTez2EhMpg.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/94/C864CECFC2F1B959551A17962994DECF61213298.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 14:50:00 +0000
Manifest this update:     Tue 02 Mar 2021 14:45:00 +0000
Manifest next update:     Wed 03 Mar 2021 14:50:00 +0000
Files and hashes:         1: C864CECFC2F1B959551A17962994DECF61213298.crl (hash: IfL2qal9SpZYJhm+NQqNUfygpDqugsyQPXgHTzHasJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:61:85:8d:60:77:7f:3f:3d:10:36:47:dd:d0:7f:f1:90:34:c6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c864cecfc2f1b959551a17962994decf61213298
        Validity
            Not Before: Mar  2 14:45:00 2021 GMT
            Not After : Mar  9 14:50:00 2021 GMT
        Subject: CN=3082010A0282010100D0A7FAD7C9FAA2574BCD7D1A79D7A5C7BCA0012828D35DDBE0AA4EAF8FE45796DBA3A68A6D94862F36610D861271FC06D7B98FDCF9DBD271ADF063C0082217529F3647DB2E2D494275C22EB9A0D732ED463EFBBFFDF00A3B85CB9E9026EF234B95E1CBAC94A6399B830B50834D14D3E415B5DB89E13F087B1D98FC8E8955B43DBBA088554A90831103954A3D15C843D344D53D811BBEB0818D7105A0B4A43FF157B7A7E9EB8666737F66DDF23EE7A27B42BD7736AC708BFDE567FC78D734FF81E3BD715A7462E8F2CBBCD7F03B1EC4FB99517B2ACFE8AB5178B896D855A6C269C72C60CB1B47BEC2CCD2D7E22B0362278C0EFD34A73751F49AB0746F43B40F5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:fa:d7:c9:fa:a2:57:4b:cd:7d:1a:79:d7:
                    a5:c7:bc:a0:01:28:28:d3:5d:db:e0:aa:4e:af:8f:
                    e4:57:96:db:a3:a6:8a:6d:94:86:2f:36:61:0d:86:
                    12:71:fc:06:d7:b9:8f:dc:f9:db:d2:71:ad:f0:63:
                    c0:08:22:17:52:9f:36:47:db:2e:2d:49:42:75:c2:
                    2e:b9:a0:d7:32:ed:46:3e:fb:bf:fd:f0:0a:3b:85:
                    cb:9e:90:26:ef:23:4b:95:e1:cb:ac:94:a6:39:9b:
                    83:0b:50:83:4d:14:d3:e4:15:b5:db:89:e1:3f:08:
                    7b:1d:98:fc:8e:89:55:b4:3d:bb:a0:88:55:4a:90:
                    83:11:03:95:4a:3d:15:c8:43:d3:44:d5:3d:81:1b:
                    be:b0:81:8d:71:05:a0:b4:a4:3f:f1:57:b7:a7:e9:
                    eb:86:66:73:7f:66:dd:f2:3e:e7:a2:7b:42:bd:77:
                    36:ac:70:8b:fd:e5:67:fc:78:d7:34:ff:81:e3:bd:
                    71:5a:74:62:e8:f2:cb:bc:d7:f0:3b:1e:c4:fb:99:
                    51:7b:2a:cf:e8:ab:51:78:b8:96:d8:55:a6:c2:69:
                    c7:2c:60:cb:1b:47:be:c2:cc:d2:d7:e2:2b:03:62:
                    27:8c:0e:fd:34:a7:37:51:f4:9a:b0:74:6f:43:b4:
                    0f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3D:73:61:17:51:EE:8A:AF:DF:EE:BE:A1:03:4D:94:2E:C7:7B:39
            X509v3 Authority Key Identifier:
                keyid:C8:64:CE:CF:C2:F1:B9:59:55:1A:17:96:29:94:DE:CF:61:21:32:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/94/C864CECFC2F1B959551A17962994DECF61213298.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGTOz8LxuVlVGheWKZTez2EhMpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/94/C864CECFC2F1B959551A17962994DECF61213298.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:c4:74:92:18:4f:66:d2:7a:64:31:8c:e9:88:66:cf:9e:
         f2:7b:e6:df:49:1e:9a:46:5f:1c:96:fd:a6:4d:0c:bb:8e:6a:
         ed:63:57:4d:f6:22:8b:1f:00:1f:bd:3d:cd:13:b4:ee:25:af:
         50:dd:cf:42:2e:2f:30:e7:9b:a6:dd:08:4d:f1:00:ff:f0:e2:
         4a:83:7a:56:f5:2d:78:6a:d4:f0:55:33:a6:9f:b5:d4:91:da:
         ed:f0:45:71:af:d3:bb:1e:b9:f9:57:c5:61:5e:17:32:e1:0c:
         34:bf:7d:77:89:03:14:31:97:58:4c:e9:8d:7a:b3:09:ef:59:
         9e:08:07:95:23:f1:15:be:a0:dd:a7:c8:09:5e:13:ec:8e:19:
         f0:7d:32:03:f3:5a:77:0a:f6:2a:ec:b8:7f:ad:9c:18:fd:9b:
         93:bf:e1:26:56:e4:7c:9c:51:9d:15:51:1c:c6:0d:7e:4c:6b:
         20:e6:86:63:a4:5c:ab:29:83:41:20:c8:02:48:6a:04:99:0c:
         ef:3b:77:1d:ee:84:e0:87:4d:fe:1a:b9:67:fb:60:63:d2:7c:
         ca:6f:34:44:c4:30:5b:5c:3f:4e:0d:52:d3:ba:e1:16:6a:fc:
         c6:33:91:45:7c:18:a4:c3:2b:dd:2c:a7:13:34:1c:96:cc:aa:
         4c:40:a5:d4
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUcGGFjWB3fz89EDZH3dB/8ZA0xg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzg2NGNlY2ZjMmYxYjk1OTU1MWExNzk2Mjk5NGRlY2Y2
MTIxMzI5ODAeFw0yMTAzMDIxNDQ1MDBaFw0yMTAzMDkxNDUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDBBN0ZBRDdDOUZBQTI1NzRC
Q0Q3RDFBNzlEN0E1QzdCQ0EwMDEyODI4RDM1RERCRTBBQTRFQUY4RkU0NTc5NkRC
QTNBNjhBNkQ5NDg2MkYzNjYxMEQ4NjEyNzFGQzA2RDdCOThGRENGOURCRDI3MUFE
RjA2M0MwMDgyMjE3NTI5RjM2NDdEQjJFMkQ0OTQyNzVDMjJFQjlBMEQ3MzJFRDQ2
M0VGQkJGRkRGMDBBM0I4NUNCOUU5MDI2RUYyMzRCOTVFMUNCQUM5NEE2Mzk5Qjgz
MEI1MDgzNEQxNEQzRTQxNUI1REI4OUUxM0YwODdCMUQ5OEZDOEU4OTU1QjQzREJC
QTA4ODU1NEE5MDgzMTEwMzk1NEEzRDE1Qzg0M0QzNDRENTNEODExQkJFQjA4MThE
NzEwNUEwQjRBNDNGRjE1N0I3QTdFOUVCODY2NjczN0Y2NkRERjIzRUU3QTI3QjQy
QkQ3NzM2QUM3MDhCRkRFNTY3RkM3OEQ3MzRGRjgxRTNCRDcxNUE3NDYyRThGMkNC
QkNEN0YwM0IxRUM0RkI5OTUxN0IyQUNGRThBQjUxNzhCODk2RDg1NUE2QzI2OUM3
MkM2MENCMUI0N0JFQzJDQ0QyRDdFMjJCMDM2MjI3OEMwRUZEMzRBNzM3NTFGNDlB
QjA3NDZGNDNCNDBGNUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Kf618n6oldLzX0aedelx7ygASgo013b4KpOr4/kV5bbo6aKbZSG
LzZhDYYScfwG17mP3Pnb0nGt8GPACCIXUp82R9suLUlCdcIuuaDXMu1GPvu//fAK
O4XLnpAm7yNLleHLrJSmOZuDC1CDTRTT5BW124nhPwh7HZj8jolVtD27oIhVSpCD
EQOVSj0VyEPTRNU9gRu+sIGNcQWgtKQ/8Ve3p+nrhmZzf2bd8j7nontCvXc2rHCL
/eVn/HjXNP+B471xWnRi6PLLvNfwOx7E+5lReyrP6KtReLiW2FWmwmnHLGDLG0e+
wszS1+IrA2InjA79NKc3UfSasHRvQ7QPXwIDAQABo4IB/TCCAfkwHQYDVR0OBBYE
FFg9c2EXUe6Kr9/uvqEDTZQux3s5MB8GA1UdIwQYMBaAFMhkzs/C8blZVRoXlimU
3s9hITKYMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC85NC9DODY0
Q0VDRkMyRjFCOTU5NTUxQTE3OTYyOTk0REVDRjYxMjEzMjk4LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdUT3o4THh1VmxWR2hlV0taVGV6MkVoTXBnLmNlcjB7
BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0Lzk0L0M4NjRDRUNGQzJGMUI5NTk1
NTFBMTc5NjI5OTRERUNGNjEyMTMyOTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/psR0khhPZtJ6ZDGM
6Yhmz57ye+bfSR6aRl8clv2mTQy7jmrtY1dN9iKLHwAfvT3NE7TuJa9Q3c9CLi8w
55um3QhN8QD/8OJKg3pW9S14atTwVTOmn7XUkdrt8EVxr9O7Hrn5V8VhXhcy4Qw0
v313iQMUMZdYTOmNerMJ71meCAeVI/EVvqDdp8gJXhPsjhnwfTID81p3CvYq7Lh/
rZwY/ZuTv+EmVuR8nFGdFVEcxg1+TGsg5oZjpFyrKYNBIMgCSGoEmQzvO3cd7oTg
h03+Grln+2Bj0nzKbzRExDBbXD9ODVLTuuEWavzGM5FFfBikwyvdLKcTNByWzKpM
QKXU
-----END CERTIFICATE-----