Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/95/3BC02841EE05535614927DAA2CD69E043E5A6286.mft
File:                     3BC02841EE05535614927DAA2CD69E043E5A6286.mft (raw, json)
Hash identifier:          HMiDqFI9+Jex+uGu70JPPEF36tcleX/nv5FGO/BMifE=
Subject key identifier:   18:80:A8:DD:DB:1F:17:C6:56:3C:36:B5:7B:A4:35:95:CE:D9:FA:69
Authority key identifier: 3B:C0:28:41:EE:05:53:56:14:92:7D:AA:2C:D6:9E:04:3E:5A:62:86
Certificate issuer:       /CN=3bc02841ee05535614927daa2cd69e043e5a6286
Certificate serial:       72C23366B3D2F131A0454380F5D694205BEF0853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8AoQe4FU1YUkn2qLNaeBD5aYoY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/95/3BC02841EE05535614927DAA2CD69E043E5A6286.mft
Manifest number:          8C
Signing time:             Tue 02 Mar 2021 12:28:01 +0000
Manifest this update:     Tue 02 Mar 2021 12:23:01 +0000
Manifest next update:     Wed 03 Mar 2021 12:28:01 +0000
Files and hashes:         1: 34352e3134332e38322e302f32342d3234203d3e203631333137.roa (hash: 1ho3UmOPK8eQcYuMGX2z8HZP1ene+/8jzfspKrASq4g=)
                          2: 3BC02841EE05535614927DAA2CD69E043E5A6286.crl (hash: 84yaVMflUUmXxUGpWJznwJ9FVR8JJ9B7F8r3B4YUfM0=)
                          3: 34352e3134332e38332e302f32342d3234203d3e203631333137.roa (hash: 2rFp/M5fSxjVUa/uWwDmFI6QkYFe62vn+7GEucihnVA=)
                          4: 34352e3134332e38332e302f32342d3234203d3e20323132323239.roa (hash: dMWL30eWLf+tFt0EZHHcMujCE+wa16ymncADnPrxysI=)
                          5: 34352e3134332e38332e302f32342d3234203d3e20323132303536.roa (hash: vnxnRH13DzpVQCt1MGr4/bn0zg0xXQ9xSgI9YYjxX+o=)
                          6: 34352e3134332e38322e302f32342d3234203d3e203630373231.roa (hash: 4mrojEL9MLTk6/NLOhiDm7wo5b3uhFuBi3ssCggdhDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c2:33:66:b3:d2:f1:31:a0:45:43:80:f5:d6:94:20:5b:ef:08:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc02841ee05535614927daa2cd69e043e5a6286
        Validity
            Not Before: Mar  2 12:23:01 2021 GMT
            Not After : Mar  9 12:28:01 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:0e:c8:52:c9:f0:af:8e:21:97:3b:05:58:
                    fa:a9:0d:c2:b0:e3:41:8e:4f:93:0a:ce:6a:fe:83:
                    06:7b:1c:6f:d4:d8:a3:b9:ee:ff:2f:22:6b:dd:37:
                    b6:92:24:98:df:2f:96:e2:e5:72:73:e9:4d:26:84:
                    5f:b7:55:65:35:a1:ca:e8:50:0a:ed:3d:3c:b7:cf:
                    b3:30:c5:7c:1b:48:91:d2:59:59:d4:0d:98:87:95:
                    f4:85:5d:d3:8f:1c:45:28:40:bf:79:68:2d:91:da:
                    46:ad:24:e1:7a:dc:a6:74:aa:b3:3d:93:83:5e:03:
                    bc:6c:d6:7b:20:00:24:57:c1:be:fa:30:e4:96:b3:
                    70:fb:03:8a:fa:7e:d4:65:62:bd:21:4a:2b:07:12:
                    3a:25:64:51:92:c9:df:4e:da:b7:16:6f:3b:9b:70:
                    ba:bd:1d:08:55:16:f3:18:ea:18:0b:bb:e8:e5:aa:
                    c1:2b:76:a0:c3:a4:38:ed:ea:c6:52:71:0a:f9:7d:
                    53:9d:80:1a:ed:89:68:be:d2:b1:6b:6a:c7:9a:bc:
                    ed:01:bc:4d:9b:53:10:51:69:92:d1:05:ca:3a:07:
                    2d:8a:65:9b:5f:8e:86:de:c0:84:fb:b4:99:6c:d4:
                    be:22:2e:3b:81:46:88:ce:aa:26:eb:6b:45:1a:cc:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:A8:DD:DB:1F:17:C6:56:3C:36:B5:7B:A4:35:95:CE:D9:FA:69
            X509v3 Authority Key Identifier:
                keyid:3B:C0:28:41:EE:05:53:56:14:92:7D:AA:2C:D6:9E:04:3E:5A:62:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/95/3BC02841EE05535614927DAA2CD69E043E5A6286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8AoQe4FU1YUkn2qLNaeBD5aYoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/95/3BC02841EE05535614927DAA2CD69E043E5A6286.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:98:c0:81:c4:5e:30:92:2f:e2:77:af:7e:38:7c:3d:de:5c:
         cf:ae:e9:23:c0:3b:c3:43:cd:41:84:8a:c4:8e:42:a0:57:0e:
         d4:84:f7:a2:ef:6f:9a:05:6a:39:c4:2a:09:4e:6b:6f:ab:1c:
         26:9c:7e:2b:79:9a:70:c0:0d:13:bd:c0:f1:5d:eb:93:4d:93:
         c9:d3:02:cc:4a:d8:b9:7e:b4:d9:a2:bf:fc:a1:ed:8d:9a:0a:
         07:b0:83:d0:e1:37:55:9d:1d:f6:80:33:bc:69:2e:32:b4:cb:
         96:77:6d:7a:f9:f7:92:07:02:59:ed:df:02:82:6f:ba:96:d7:
         e6:2f:cf:e8:74:87:3c:6b:eb:0a:55:62:84:8c:38:ec:1d:f0:
         1c:11:44:da:d8:80:32:12:85:e8:c4:8d:7b:00:f9:c6:70:d1:
         32:01:88:28:36:18:49:e4:c4:15:3a:ab:ca:87:c3:23:55:f6:
         f1:a4:12:28:42:a3:cb:4e:01:38:58:be:7b:d1:27:39:90:26:
         ef:13:03:18:96:d3:5a:ae:fe:b7:dd:51:13:17:86:d9:4e:e3:
         ba:bf:5d:f9:2d:58:72:1d:1d:2f:08:58:5d:02:a3:d8:f7:43:
         28:c6:b9:99:c8:f4:c8:f7:10:f3:c4:14:2a:14:2a:6a:8f:a8:
         f4:a2:47:c3
-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgIUcsIzZrPS8TGgRUOA9daUIFvvCFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2JjMDI4NDFlZTA1NTM1NjE0OTI3ZGFhMmNkNjllMDQz
ZTVhNjI4NjAeFw0yMTAzMDIxMjIzMDFaFw0yMTAzMDkxMjI4MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjlGNzBFQzg1MkM5RjBBRjhF
MjE5NzNCMDU1OEZBQTkwREMyQjBFMzQxOEU0RjkzMEFDRTZBRkU4MzA2N0IxQzZG
RDREOEEzQjlFRUZGMkYyMjZCREQzN0I2OTIyNDk4REYyRjk2RTJFNTcyNzNFOTRE
MjY4NDVGQjc1NTY1MzVBMUNBRTg1MDBBRUQzRDNDQjdDRkIzMzBDNTdDMUI0ODkx
RDI1OTU5RDQwRDk4ODc5NUY0ODU1REQzOEYxQzQ1Mjg0MEJGNzk2ODJEOTFEQTQ2
QUQyNEUxN0FEQ0E2NzRBQUIzM0Q5MzgzNUUwM0JDNkNENjdCMjAwMDI0NTdDMUJF
RkEzMEU0OTZCMzcwRkIwMzhBRkE3RUQ0NjU2MkJEMjE0QTJCMDcxMjNBMjU2NDUx
OTJDOURGNEVEQUI3MTY2RjNCOUI3MEJBQkQxRDA4NTUxNkYzMThFQTE4MEJCQkU4
RTVBQUMxMkI3NkEwQzNBNDM4RURFQUM2NTI3MTBBRjk3RDUzOUQ4MDFBRUQ4OTY4
QkVEMkIxNkI2QUM3OUFCQ0VEMDFCQzREOUI1MzEwNTE2OTkyRDEwNUNBM0EwNzJE
OEE2NTlCNUY4RTg2REVDMDg0RkJCNDk5NkNENEJFMjIyRTNCODE0Njg4Q0VBQTI2
RUI2QjQ1MUFDQ0NENDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAufcOyFLJ8K+OIZc7BVj6qQ3CsONBjk+TCs5q/oMGexxv1Nijue7/
LyJr3Te2kiSY3y+W4uVyc+lNJoRft1VlNaHK6FAK7T08t8+zMMV8G0iR0llZ1A2Y
h5X0hV3TjxxFKEC/eWgtkdpGrSThetymdKqzPZODXgO8bNZ7IAAkV8G++jDklrNw
+wOK+n7UZWK9IUorBxI6JWRRksnfTtq3Fm87m3C6vR0IVRbzGOoYC7vo5arBK3ag
w6Q47erGUnEK+X1TnYAa7YlovtKxa2rHmrztAbxNm1MQUWmS0QXKOgctimWbX46G
3sCE+7SZbNS+Ii47gUaIzqom62tFGszNQQIDAQABo4IB/TCCAfkwHQYDVR0OBBYE
FBiAqN3bHxfGVjw2tXukNZXO2fppMB8GA1UdIwQYMBaAFDvAKEHuBVNWFJJ9qizW
ngQ+WmKGMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC85NS8zQkMw
Mjg0MUVFMDU1MzU2MTQ5MjdEQUEyQ0Q2OUUwNDNFNUE2Mjg2LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzhBb1FlNEZVMVlVa24ycUxOYWVCRDVhWW9ZLmNlcjB7
BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0Lzk1LzNCQzAyODQxRUUwNTUzNTYx
NDkyN0RBQTJDRDY5RTA0M0U1QTYyODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8mMCBxF4wki/id69+
OHw93lzPrukjwDvDQ81BhIrEjkKgVw7UhPei72+aBWo5xCoJTmtvqxwmnH4reZpw
wA0TvcDxXeuTTZPJ0wLMSti5frTZor/8oe2NmgoHsIPQ4TdVnR32gDO8aS4ytMuW
d216+feSBwJZ7d8Cgm+6ltfmL8/odIc8a+sKVWKEjDjsHfAcEUTa2IAyEoXoxI17
APnGcNEyAYgoNhhJ5MQVOqvKh8MjVfbxpBIoQqPLTgE4WL570Sc5kCbvEwMYltNa
rv633VETF4bZTuO6v135LVhyHR0vCFhdAqPY90MoxrmZyPTI9xDzxBQqFCpqj6j0
okfD
-----END CERTIFICATE-----