Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/153/2DB99CC50935295F8E3427A0BB691B41507E3276.mft
File:                     2DB99CC50935295F8E3427A0BB691B41507E3276.mft (raw, json)
Hash identifier:          PgruBD6ughExxwZQoP+mBrDo+v7M9UyEZlxW1ORewfg=
Subject key identifier:   17:19:3F:56:C0:4E:4D:56:F3:DC:8E:F1:9E:09:A1:F8:A0:11:C3:6D
Authority key identifier: 2D:B9:9C:C5:09:35:29:5F:8E:34:27:A0:BB:69:1B:41:50:7E:32:76
Certificate issuer:       /CN=2db99cc50935295f8e3427a0bb691b41507e3276
Certificate serial:       4E7A7588157C52EF3076C3D6745915656BEB3610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LbmcxQk1KV-ONCegu2kbQVB-MnY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/153/2DB99CC50935295F8E3427A0BB691B41507E3276.mft
Manifest number:          8E
Signing time:             Tue 02 Mar 2021 22:30:00 +0000
Manifest this update:     Tue 02 Mar 2021 22:25:00 +0000
Manifest next update:     Wed 03 Mar 2021 22:30:00 +0000
Files and hashes:         1: 2DB99CC50935295F8E3427A0BB691B41507E3276.crl (hash: shFfm5CXLYIe/hklsPUsRmn+ry2YCL8wRjhMIgpX+8A=)
                          2: 34352e31302e3135342e302f32342d3234203d3e203430363736.roa (hash: UWg6Oa1zg/Q0COthqme7++8ce1Z1zR+bUSzR8ani6ng=)
                          3: 34352e31302e3135342e302f32342d3234203d3e203631333137.roa (hash: xGA3s90NOC/ODLX+QgEEsMSia09mRyqPsR2uuI9dogI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7a:75:88:15:7c:52:ef:30:76:c3:d6:74:59:15:65:6b:eb:36:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db99cc50935295f8e3427a0bb691b41507e3276
        Validity
            Not Before: Mar  2 22:25:00 2021 GMT
            Not After : Mar  9 22:30:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:b9:3e:1c:8e:dc:93:39:ad:79:37:b0:d1:
                    25:da:e4:bf:8d:3c:ef:02:b4:0a:73:2f:10:85:ac:
                    f9:e2:88:ae:83:30:f4:05:55:1a:71:1b:b5:3c:f8:
                    c0:a7:dd:18:e7:62:4f:a5:7a:e8:d3:9b:3b:17:fd:
                    e6:97:fb:c0:cd:e1:c8:fe:34:1e:bf:57:3f:71:d6:
                    a0:15:77:91:f2:a3:16:ae:55:ac:46:3f:27:fe:75:
                    4e:6b:8d:a5:dc:1b:17:83:c5:48:9e:47:75:ea:44:
                    c0:f4:9d:27:f3:a3:0c:89:1b:2c:c6:84:78:c2:4c:
                    3f:b8:32:e9:a9:04:e5:3c:5f:a1:96:09:fa:2e:67:
                    cd:1c:84:20:60:ac:ba:9b:2a:22:9d:11:f2:1c:03:
                    4b:05:85:79:2d:17:db:85:07:0f:d9:83:26:1c:dc:
                    57:90:fb:79:f9:a9:7d:e3:92:91:d0:a0:b2:46:d1:
                    a2:79:18:b2:dc:b8:4d:7f:76:0d:ea:aa:64:05:20:
                    ef:a1:5b:a2:dc:56:73:ec:7e:e7:0a:eb:ac:48:3c:
                    4d:2e:d0:b1:27:2b:ce:82:d8:fd:05:56:10:32:17:
                    f2:f7:f7:49:9c:43:2b:34:39:dd:14:a4:be:f8:c1:
                    ff:9b:37:af:8d:ef:f1:80:d2:04:fe:ec:6c:31:ad:
                    8a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:19:3F:56:C0:4E:4D:56:F3:DC:8E:F1:9E:09:A1:F8:A0:11:C3:6D
            X509v3 Authority Key Identifier:
                keyid:2D:B9:9C:C5:09:35:29:5F:8E:34:27:A0:BB:69:1B:41:50:7E:32:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/153/2DB99CC50935295F8E3427A0BB691B41507E3276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbmcxQk1KV-ONCegu2kbQVB-MnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/153/2DB99CC50935295F8E3427A0BB691B41507E3276.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:bd:93:06:8c:3e:76:28:3f:46:f0:97:02:4d:e6:bf:d8:
         0b:88:61:8f:8e:2d:5e:b2:98:2b:b3:b6:15:50:d7:85:83:68:
         0d:5c:07:32:74:d5:ed:66:c0:5f:b6:3e:b2:13:ff:3a:15:2d:
         b0:e2:d2:16:d9:f4:23:c5:b4:27:92:cb:7b:c1:ec:76:bb:75:
         76:7f:b9:8a:26:44:7d:73:2c:d2:e7:28:f2:59:34:f9:94:e4:
         10:12:05:79:ba:63:84:df:fc:be:2b:fd:0c:68:18:34:f8:7d:
         dd:ec:05:3d:f3:16:6b:4d:a8:cc:f4:56:27:06:7d:6e:f6:6b:
         04:b5:9a:7d:6d:3b:71:76:50:a8:42:f8:1f:ca:d4:ae:bd:65:
         31:00:4b:f7:c4:7f:97:2a:a6:07:7d:b6:69:b1:3c:b8:9b:95:
         55:3f:f4:92:64:cb:5b:41:25:1c:47:4a:a4:56:09:a1:ec:a8:
         8d:3b:a1:08:4c:d3:f8:db:95:9e:70:10:e9:81:e9:1f:39:5d:
         39:38:06:3f:9b:ff:0a:ea:da:2e:68:24:f5:2b:8c:c0:dc:01:
         72:c3:c1:23:bb:46:81:04:33:86:ed:a2:55:19:63:bc:63:77:
         65:90:50:49:d1:f2:7c:8a:9d:9e:ff:46:c0:a8:d0:10:00:5e:
         10:3d:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:54:40 2025 by rpki-client