Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/128/249FD78C3F7BCEE5AC33C8C9BBED4A466FAA5DBC.mft
File:                     249FD78C3F7BCEE5AC33C8C9BBED4A466FAA5DBC.mft (raw, json)
Hash identifier:          BwEPozBKKqvMBnNs5UNYp7CLK4m9+bVcttL94aPKQFY=
Subject key identifier:   88:63:08:FB:F6:18:64:BC:62:38:18:D3:B0:EF:D0:29:44:C3:71:4B
Authority key identifier: 24:9F:D7:8C:3F:7B:CE:E5:AC:33:C8:C9:BB:ED:4A:46:6F:AA:5D:BC
Certificate issuer:       /CN=249fd78c3f7bcee5ac33c8c9bbed4a466faa5dbc
Certificate serial:       18BF77D0002858984CC6C3B5B13649C00414E1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JJ_XjD97zuWsM8jJu-1KRm-qXbw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/128/249FD78C3F7BCEE5AC33C8C9BBED4A466FAA5DBC.mft
Manifest number:          89
Signing time:             Tue 02 Mar 2021 14:28:00 +0000
Manifest this update:     Tue 02 Mar 2021 14:23:00 +0000
Manifest next update:     Wed 03 Mar 2021 14:28:00 +0000
Files and hashes:         1: 249FD78C3F7BCEE5AC33C8C9BBED4A466FAA5DBC.crl (hash: 0hZKbESSq1qIsTK16kCrFiyaf4i9/4ZwFpVKol9W7YI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bf:77:d0:00:28:58:98:4c:c6:c3:b5:b1:36:49:c0:04:14:e1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249fd78c3f7bcee5ac33c8c9bbed4a466faa5dbc
        Validity
            Not Before: Mar  2 14:23:00 2021 GMT
            Not After : Mar  9 14:28:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:5c:72:be:96:6f:41:6b:89:b4:47:b1:67:
                    e5:37:d3:e2:5f:af:ef:d1:e4:2c:16:b6:55:6b:8f:
                    8c:64:5b:ec:31:6f:ae:d0:78:77:da:c7:b9:a9:0e:
                    3b:90:6c:fa:70:c3:45:e5:e5:17:43:04:bc:18:ca:
                    cd:66:b5:5b:d1:9a:4d:8a:1c:0f:ef:73:d4:27:95:
                    f9:4c:ea:36:6b:d5:cb:00:79:8b:11:47:f0:a5:54:
                    ca:fa:b7:2c:99:f0:da:23:a2:d3:0e:86:f4:16:46:
                    ee:f9:1c:7a:75:57:f9:6f:95:67:72:33:d3:f2:59:
                    f5:4e:18:75:a7:83:45:05:eb:9b:fd:99:c8:16:a4:
                    1c:bf:58:e5:5b:7b:3e:48:a8:02:4c:2b:11:ff:d8:
                    97:8e:85:9a:5b:e5:d9:46:6f:7b:d9:0d:57:96:b0:
                    52:98:91:06:f7:99:fb:15:10:23:fb:a6:ee:0a:26:
                    b9:db:30:77:97:0b:52:e1:63:a7:e1:e0:be:43:00:
                    3d:0b:f6:fc:f6:5a:9d:26:c1:9b:10:4d:25:1f:37:
                    bb:94:39:ef:e6:c0:3b:cb:32:d6:fe:c7:90:c3:69:
                    5a:6d:a8:24:6c:9f:88:45:ed:cc:72:1b:e7:ed:b7:
                    e1:e4:34:0e:64:e9:6b:b1:b5:fb:72:49:26:83:97:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:63:08:FB:F6:18:64:BC:62:38:18:D3:B0:EF:D0:29:44:C3:71:4B
            X509v3 Authority Key Identifier:
                keyid:24:9F:D7:8C:3F:7B:CE:E5:AC:33:C8:C9:BB:ED:4A:46:6F:AA:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/128/249FD78C3F7BCEE5AC33C8C9BBED4A466FAA5DBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJ_XjD97zuWsM8jJu-1KRm-qXbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/128/249FD78C3F7BCEE5AC33C8C9BBED4A466FAA5DBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:cd:13:96:f1:24:f8:43:7e:05:4d:b8:42:45:d3:ac:67:0d:
         bc:87:5a:bc:a0:bb:64:37:cd:d4:c4:f1:86:ea:51:bd:77:a5:
         e9:33:80:05:42:19:2d:55:ba:c6:91:7c:d6:c6:3d:78:d0:e2:
         cb:b2:57:0f:3f:98:d4:02:cf:08:97:27:60:06:1c:76:bf:55:
         f8:71:ec:93:bc:55:24:cd:8c:ef:d2:d9:c0:a0:5d:8a:7d:2d:
         da:b7:c2:c0:2f:04:ba:fe:ef:c8:67:cd:18:3c:20:4a:00:20:
         a8:09:c7:14:21:63:55:ac:ea:0e:0a:3b:ba:88:e9:8a:1c:f1:
         47:6b:d2:d3:f2:bc:ae:d8:a9:f7:82:10:d7:f9:da:6d:51:12:
         22:a4:f4:48:03:2a:13:81:69:2a:68:9c:93:c2:04:4a:5f:3e:
         c8:65:73:12:8c:9d:0f:f6:a8:9d:a3:21:91:f3:67:b9:2b:04:
         0a:56:ab:db:d2:ce:ab:a9:fd:81:e2:87:ad:68:7f:01:9a:ad:
         03:0a:e6:29:d9:cb:5d:a3:57:41:f0:df:14:7f:d5:4e:61:d4:
         4c:c1:e8:a6:01:b5:a1:d2:75:fa:ec:ed:5e:50:42:d5:dc:d0:
         ac:7b:67:bd:e5:97:8f:37:9b:c0:b2:7b:34:c9:80:d5:e9:7b:
         3e:e0:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----