Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/215/D27757F2B764ABCAD8B4C1BFB574C9A40AB6CF10.mft
File:                     D27757F2B764ABCAD8B4C1BFB574C9A40AB6CF10.mft (raw, json)
Hash identifier:          OglrwZfHhjBpk7ktYNx7HcgsQbGkUTJTLVfzPu5iCXI=
Subject key identifier:   AE:5C:22:3D:E5:07:F6:D4:3D:C0:FE:E7:D8:53:66:5D:17:D0:FE:7B
Authority key identifier: D2:77:57:F2:B7:64:AB:CA:D8:B4:C1:BF:B5:74:C9:A4:0A:B6:CF:10
Certificate issuer:       /CN=d27757f2b764abcad8b4c1bfb574c9a40ab6cf10
Certificate serial:       128600A3CABE431B383DC6920A9B8CA03351D140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ndX8rdkq8rYtMG_tXTJpAq2zxA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/215/D27757F2B764ABCAD8B4C1BFB574C9A40AB6CF10.mft
Manifest number:          02ED
Signing time:             Mon 27 Mar 2023 08:29:09 +0000
Manifest this update:     Mon 27 Mar 2023 08:24:09 +0000
Manifest next update:     Tue 28 Mar 2023 08:30:09 +0000
Files and hashes:         1: D27757F2B764ABCAD8B4C1BFB574C9A40AB6CF10.crl (hash: kNYkZc2JUNGdmyI+SctiUk49V3UojF210BMfuAkU7ys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:86:00:a3:ca:be:43:1b:38:3d:c6:92:0a:9b:8c:a0:33:51:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27757f2b764abcad8b4c1bfb574c9a40ab6cf10
        Validity
            Not Before: Mar 27 08:24:09 2023 GMT
            Not After : Mar 28 08:30:09 2023 GMT
        Subject: CN=AE5C223DE507F6D43DC0FEE7D853665D17D0FE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:c6:a0:8e:cf:76:f4:b3:c0:06:f1:0a:57:
                    4a:b9:07:da:62:a4:27:2c:b7:03:20:33:e5:99:af:
                    46:d9:9b:54:9d:10:a5:9d:2a:8f:a4:91:6f:bd:db:
                    1f:76:ef:93:dc:76:80:b9:11:47:1d:c6:9c:b3:21:
                    00:09:b5:86:3a:16:bd:7a:80:b9:cf:83:27:af:0c:
                    40:f3:78:b0:05:e5:ce:2f:22:25:5a:db:0e:c1:a3:
                    23:13:13:86:c4:8c:d3:26:61:13:cc:65:da:9f:69:
                    3f:d7:3e:f2:6e:ca:04:96:1e:e5:51:95:6c:2a:3b:
                    f5:d6:04:87:73:f4:57:62:33:8f:a4:e1:5b:ee:5a:
                    b0:6b:a7:b7:5b:05:0e:00:bd:9a:57:3a:be:29:b6:
                    3f:b3:60:17:38:bb:37:09:1f:82:6a:2e:82:1c:36:
                    fb:34:0b:87:4d:1e:d5:a7:97:8d:7e:0d:3e:01:bd:
                    e5:a8:af:29:22:f3:10:bf:44:d3:4c:cb:98:d0:97:
                    ae:7d:a0:01:0d:8e:58:5c:69:d9:82:51:06:4f:d9:
                    ad:5a:29:4b:09:07:cf:c5:6e:83:cf:36:52:65:2a:
                    65:75:ad:bb:60:67:6b:09:22:78:8b:c7:87:74:eb:
                    7a:26:5e:f5:d5:df:02:a9:f2:47:dc:ac:57:64:81:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5C:22:3D:E5:07:F6:D4:3D:C0:FE:E7:D8:53:66:5D:17:D0:FE:7B
            X509v3 Authority Key Identifier:
                keyid:D2:77:57:F2:B7:64:AB:CA:D8:B4:C1:BF:B5:74:C9:A4:0A:B6:CF:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/215/D27757F2B764ABCAD8B4C1BFB574C9A40AB6CF10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ndX8rdkq8rYtMG_tXTJpAq2zxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/215/D27757F2B764ABCAD8B4C1BFB574C9A40AB6CF10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7e:1a:a3:8a:a8:21:09:6e:cd:31:d1:1e:61:33:cd:57:44:
         23:ee:a8:60:0d:59:ca:f2:df:e0:b9:bc:d9:b0:03:25:d9:b2:
         b1:87:cb:df:a9:83:e8:9f:bf:53:8e:c3:65:b6:a5:51:e2:62:
         d9:57:d0:66:bb:da:58:c9:58:40:09:8d:9c:47:aa:df:36:4d:
         71:37:dc:56:2a:c2:ed:6e:17:a2:26:46:7d:f6:7e:c8:07:75:
         b0:9a:dd:3d:79:51:b1:51:be:12:d1:a7:a6:a0:8d:e3:4d:a8:
         41:8b:65:72:22:71:f6:50:1a:f2:b4:e7:b8:37:5f:93:5b:69:
         3b:d8:66:41:57:73:9f:83:8f:4e:8d:c2:ce:b7:e4:91:a8:0b:
         a0:5e:b3:2f:e3:28:d0:0d:ba:32:d8:90:84:b9:0e:af:a7:23:
         09:ee:19:cc:fd:5e:31:be:cc:35:0a:2a:88:67:55:a0:c4:a4:
         ac:2b:38:51:7f:f0:d4:5b:80:43:92:ee:e4:1c:22:51:27:b3:
         82:31:64:09:59:98:67:a5:e9:a6:8c:73:a7:c9:da:bc:e8:85:
         84:38:eb:5a:f9:c5:4d:23:91:3d:45:68:49:3b:28:c1:c4:b5:
         bf:b8:74:17:1d:c3:53:6f:70:12:d6:d7:7c:f1:0e:87:3e:9b:
         e8:a8:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:00:44 2025 by rpki-client