Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/tt1-51/0/A86BB2D6000DCA3FD27A42470AEA8CAA70C22688.mft
File:                     A86BB2D6000DCA3FD27A42470AEA8CAA70C22688.mft (raw, json)
Hash identifier:          RJFI/xudxxO+01m6D2kfcRKYZBsvy87J0uFER/f2niM=
Subject key identifier:   5A:AC:90:98:03:53:99:49:99:3F:3A:B6:23:8C:85:37:72:C1:93:97
Authority key identifier: A8:6B:B2:D6:00:0D:CA:3F:D2:7A:42:47:0A:EA:8C:AA:70:C2:26:88
Certificate issuer:       /CN=a86bb2d6000dca3fd27a42470aea8caa70c22688
Certificate serial:       621085650B2ADC944167472D4D0563669B32597A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGuy1gANyj_SekJHCuqMqnDCJog.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/tt1-51/0/A86BB2D6000DCA3FD27A42470AEA8CAA70C22688.mft
Manifest number:          95
Signing time:             Tue 02 Mar 2021 16:20:00 +0000
Manifest this update:     Tue 02 Mar 2021 16:15:00 +0000
Manifest next update:     Wed 03 Mar 2021 16:20:00 +0000
Files and hashes:         1: A86BB2D6000DCA3FD27A42470AEA8CAA70C22688.crl (hash: rzZCMBeK1fnVS8JiZG1+HZrMpZldfEvMS30MB4wSWb8=)
                          2: 39322e3131392e38302e302f32322d3234203d3e203335393133.roa (hash: JSYwRde/JaFbzX2jPSFrATNZ6bWkqFTdaVs9rfMrcr4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:10:85:65:0b:2a:dc:94:41:67:47:2d:4d:05:63:66:9b:32:59:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86bb2d6000dca3fd27a42470aea8caa70c22688
        Validity
            Not Before: Mar  2 16:15:00 2021 GMT
            Not After : Mar  9 16:20:00 2021 GMT
        Subject: CN=3082010A0282010100CAB566D50471189F71A586E3EA6366C0B76A9192324E1E6E53EDDE82D0EE8BB868359A27963B8ECB58BF5091EE3BD2F74ACC69C82FC17A85EEC8472A50AC56DD399ABEB136521722FCF87AFD4298E942A55D91B052806ED614C6D967B7BF4BFA9C16B3F917884D8B064AC3C03AEDA865AF6A081CC47A11A259BBD4D0E04AE51FFB83070C804808089C5C4B23D4CF8BB59F12B48148E4FDC8D89B87148BA360A0258EAE1DF7B046CF192144BC37FC14BF606792F641E9D7FE1894520E52EF01DAA2CFEF5D60DB4A93CB691D9D09B7D7214BC375544B75764D565F4822EB02297B69F48DFEE2A540EB28EC728883AA95AC10157648445497DBD14C157707607A2D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:66:d5:04:71:18:9f:71:a5:86:e3:ea:63:
                    66:c0:b7:6a:91:92:32:4e:1e:6e:53:ed:de:82:d0:
                    ee:8b:b8:68:35:9a:27:96:3b:8e:cb:58:bf:50:91:
                    ee:3b:d2:f7:4a:cc:69:c8:2f:c1:7a:85:ee:c8:47:
                    2a:50:ac:56:dd:39:9a:be:b1:36:52:17:22:fc:f8:
                    7a:fd:42:98:e9:42:a5:5d:91:b0:52:80:6e:d6:14:
                    c6:d9:67:b7:bf:4b:fa:9c:16:b3:f9:17:88:4d:8b:
                    06:4a:c3:c0:3a:ed:a8:65:af:6a:08:1c:c4:7a:11:
                    a2:59:bb:d4:d0:e0:4a:e5:1f:fb:83:07:0c:80:48:
                    08:08:9c:5c:4b:23:d4:cf:8b:b5:9f:12:b4:81:48:
                    e4:fd:c8:d8:9b:87:14:8b:a3:60:a0:25:8e:ae:1d:
                    f7:b0:46:cf:19:21:44:bc:37:fc:14:bf:60:67:92:
                    f6:41:e9:d7:fe:18:94:52:0e:52:ef:01:da:a2:cf:
                    ef:5d:60:db:4a:93:cb:69:1d:9d:09:b7:d7:21:4b:
                    c3:75:54:4b:75:76:4d:56:5f:48:22:eb:02:29:7b:
                    69:f4:8d:fe:e2:a5:40:eb:28:ec:72:88:83:aa:95:
                    ac:10:15:76:48:44:54:97:db:d1:4c:15:77:07:60:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:90:98:03:53:99:49:99:3F:3A:B6:23:8C:85:37:72:C1:93:97
            X509v3 Authority Key Identifier:
                keyid:A8:6B:B2:D6:00:0D:CA:3F:D2:7A:42:47:0A:EA:8C:AA:70:C2:26:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/tt1-51/0/A86BB2D6000DCA3FD27A42470AEA8CAA70C22688.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGuy1gANyj_SekJHCuqMqnDCJog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/tt1-51/0/A86BB2D6000DCA3FD27A42470AEA8CAA70C22688.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:0b:33:3c:97:b8:73:62:fa:f5:61:26:55:76:4a:30:48:5f:
         80:d7:91:7f:9e:7f:c1:bb:ee:4e:26:f3:21:60:e3:06:20:c4:
         98:37:d3:37:4a:33:81:59:97:03:cd:1f:81:f2:09:13:84:03:
         c8:06:cb:1f:04:b6:48:e4:59:8b:08:f1:e5:a9:18:db:b3:f7:
         7f:ba:6f:3e:55:dd:5e:74:08:fc:1a:3b:f1:aa:27:7a:72:4b:
         0e:6f:5d:f8:c6:9d:ed:8e:78:75:0d:99:75:fb:7d:cc:49:fe:
         49:d1:a1:0b:24:c1:43:ef:e5:98:23:c8:03:56:fa:7b:60:26:
         b4:fb:21:86:2e:7a:6f:2b:dd:df:a4:eb:c4:f3:e3:82:b9:b9:
         d9:31:c6:5e:39:07:6d:fc:a5:93:8a:02:3e:40:72:c3:2a:53:
         27:5a:65:c8:69:c2:cf:e9:fe:e9:6d:ea:42:41:20:b5:53:78:
         2f:6d:cb:21:77:3a:4b:52:04:6a:74:a1:03:17:0d:d2:9f:d1:
         78:fc:73:02:21:f5:bd:49:2d:c6:4e:90:f1:eb:04:5a:22:a2:
         04:f4:82:59:af:65:7b:eb:9e:94:e6:53:cc:45:60:70:6f:01:
         db:a2:4e:59:b6:2d:4c:c8:b1:ab:47:72:c1:ba:1b:b5:03:ea:
         03:7f:6b:ed
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUYhCFZQsq3JRBZ0ctTQVjZpsyWXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTg2YmIyZDYwMDBkY2EzZmQyN2E0MjQ3MGFlYThjYWE3
MGMyMjY4ODAeFw0yMTAzMDIxNjE1MDBaFw0yMTAzMDkxNjIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0FCNTY2RDUwNDcxMTg5Rjcx
QTU4NkUzRUE2MzY2QzBCNzZBOTE5MjMyNEUxRTZFNTNFRERFODJEMEVFOEJCODY4
MzU5QTI3OTYzQjhFQ0I1OEJGNTA5MUVFM0JEMkY3NEFDQzY5QzgyRkMxN0E4NUVF
Qzg0NzJBNTBBQzU2REQzOTlBQkVCMTM2NTIxNzIyRkNGODdBRkQ0Mjk4RTk0MkE1
NUQ5MUIwNTI4MDZFRDYxNEM2RDk2N0I3QkY0QkZBOUMxNkIzRjkxNzg4NEQ4QjA2
NEFDM0MwM0FFREE4NjVBRjZBMDgxQ0M0N0ExMUEyNTlCQkQ0RDBFMDRBRTUxRkZC
ODMwNzBDODA0ODA4MDg5QzVDNEIyM0Q0Q0Y4QkI1OUYxMkI0ODE0OEU0RkRDOEQ4
OUI4NzE0OEJBMzYwQTAyNThFQUUxREY3QjA0NkNGMTkyMTQ0QkMzN0ZDMTRCRjYw
Njc5MkY2NDFFOUQ3RkUxODk0NTIwRTUyRUYwMURBQTJDRkVGNUQ2MERCNEE5M0NC
NjkxRDlEMDlCN0Q3MjE0QkMzNzU1NDRCNzU3NjRENTY1RjQ4MjJFQjAyMjk3QjY5
RjQ4REZFRTJBNTQwRUIyOEVDNzI4ODgzQUE5NUFDMTAxNTc2NDg0NDU0OTdEQkQx
NEMxNTc3MDc2MDdBMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyrVm1QRxGJ9xpYbj6mNmwLdqkZIyTh5uU+3egtDui7hoNZonljuO
y1i/UJHuO9L3SsxpyC/BeoXuyEcqUKxW3TmavrE2Uhci/Ph6/UKY6UKlXZGwUoBu
1hTG2We3v0v6nBaz+ReITYsGSsPAOu2oZa9qCBzEehGiWbvU0OBK5R/7gwcMgEgI
CJxcSyPUz4u1nxK0gUjk/cjYm4cUi6NgoCWOrh33sEbPGSFEvDf8FL9gZ5L2QenX
/hiUUg5S7wHaos/vXWDbSpPLaR2dCbfXIUvDdVRLdXZNVl9IIusCKXtp9I3+4qVA
6yjscoiDqpWsEBV2SERUl9vRTBV3B2B6LQIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FFqskJgDU5lJmT86tiOMhTdywZOXMB8GA1UdIwQYMBaAFKhrstYADco/0npCRwrq
jKpwwiaIMA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL3R0MS01MS8wL0E4NkJCMkQ2MDAw
RENBM0ZEMjdBNDI0NzBBRUE4Q0FBNzBDMjI2ODguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9xR3V5MWdBTnlqX1Nla0pIQ3VxTXFuRENKb2cuY2VyMHQGCCsGAQUF
BwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQu
ZGUvcmVwby90dDEtNTEvMC9BODZCQjJENjAwMERDQTNGRDI3QTQyNDcwQUVBOENB
QTcwQzIyNjg4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAwgszPJe4c2L69WEmVXZKMEhfgNeRf55/wbvu
TibzIWDjBiDEmDfTN0ozgVmXA80fgfIJE4QDyAbLHwS2SORZiwjx5akY27P3f7pv
PlXdXnQI/Bo78aonenJLDm9d+Mad7Y54dQ2Zdft9zEn+SdGhCyTBQ+/lmCPIA1b6
e2AmtPshhi56byvd36TrxPPjgrm52THGXjkHbfylk4oCPkBywypTJ1plyGnCz+n+
6W3qQkEgtVN4L23LIXc6S1IEanShAxcN0p/RePxzAiH1vUktxk6Q8esEWiKiBPSC
Wa9le+uelOZTzEVgcG8B26JOWbYtTMixq0dywbobtQPqA39r7Q==
-----END CERTIFICATE-----