Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.mft
File:                     E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.mft (raw, json)
Hash identifier:          r0yEgxpjSUc/fD8j+M5MShkNfDaaud1AeYp4+pMatYg=
Subject key identifier:   DD:2A:97:05:87:F7:58:A0:FE:FB:38:46:45:B7:89:93:35:9C:5A:2B
Authority key identifier: E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD
Certificate issuer:       /CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
Certificate serial:       3C9E6D76A54CA6AD8574250345ECEEED997357B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.mft
Manifest number:          0687
Signing time:             Mon 27 Mar 2023 07:18:27 +0000
Manifest this update:     Mon 27 Mar 2023 07:13:27 +0000
Manifest next update:     Tue 28 Mar 2023 08:40:27 +0000
Files and hashes:         1: 34352e39342e36342e302f32322d3232203d3e20323031333431.roa (hash: E+bnk27QREI8X237DE8CfMpkqkqDBiob8bDmj9njjKg=)
                          2: 34352e3134382e3139342e302f32342d3234203d3e20313938303930.roa (hash: t5wWt8Ars1chlDG78/HyeAAqL/e3Gw8COP3Qgt/Mei8=)
                          3: 34352e39342e35382e302f32342d3332203d3e203531313637.roa (hash: K4oBEUGhRSKfbFwS8Clin1smUBBCxcdbe3DMhB+1+Nw=)
                          4: 34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa (hash: PBcXkES6uIZhR8wqnq5qkyEBI9zdbI2Hkyq3p+RRCww=)
                          5: 34352e38372e382e302f32322d3234203d3e20323031333431.roa (hash: exxFg9szh4Qy7RrhMDiFaltXIrjsanveTjIZ0xS9rww=)
                          6: E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.crl (hash: qCHNPdYouwkOQmIJOPosRNSQwuEZi73IXFPLEqZtdtY=)
                          7: 34352e39342e35362e302f32342d3234203d3e20323132343136.roa (hash: cJLd3ukqZqbXF05jKS4LkJy0mSjL8RsrNBrNRhcxt5I=)
                          8: 34352e3134302e3230302e302f32322d3232203d3e20323031333431.roa (hash: lmHxYGiyr36MC2t/yY+mBjKB8YlwTJju7YhmH6DE1rk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9e:6d:76:a5:4c:a6:ad:85:74:25:03:45:ec:ee:ed:99:73:57:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
        Validity
            Not Before: Mar 27 07:13:27 2023 GMT
            Not After : Mar 28 08:40:27 2023 GMT
        Subject: CN=DD2A970587F758A0FEFB384645B78993359C5A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:98:44:58:7c:d4:9f:97:af:1c:94:5e:14:
                    14:39:67:e7:e4:28:8b:37:35:c0:ea:7a:05:66:37:
                    b3:dc:d2:c9:73:66:2d:01:05:d2:7a:9d:09:3c:e4:
                    a5:be:15:fc:d3:10:4b:22:81:21:03:73:43:8f:4a:
                    89:7c:c9:51:4c:66:98:24:86:36:07:5d:4d:1b:5b:
                    2c:02:f3:ed:39:02:3a:c3:7a:b0:94:e0:c7:0e:6f:
                    1b:3a:ba:e0:ab:ef:47:fd:1f:9c:4c:52:da:66:61:
                    24:d3:b5:fb:0c:11:b0:4e:51:ca:ff:d8:d4:12:e9:
                    19:bc:32:03:c2:c6:f0:db:28:0a:2b:d2:d4:fb:f7:
                    cb:ae:d5:e0:17:61:46:3e:78:a4:e8:f4:fe:f7:49:
                    83:9e:ce:5b:39:9d:14:09:2e:46:28:4d:2f:89:8a:
                    54:b5:77:ac:57:66:68:f3:9b:19:ac:38:88:bf:13:
                    a5:36:f4:49:f0:9a:e5:6f:56:82:27:1f:cd:03:57:
                    b7:c2:8c:c6:b0:07:d2:ec:b9:e8:e4:39:5e:5e:00:
                    2f:c0:50:84:ab:73:7b:d5:a3:63:9b:c7:a2:af:e7:
                    b8:45:90:02:55:e1:11:9a:60:0b:25:8f:45:29:58:
                    64:9f:55:65:10:0d:ac:fc:25:c9:02:e6:26:3d:ab:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2A:97:05:87:F7:58:A0:FE:FB:38:46:45:B7:89:93:35:9C:5A:2B
            X509v3 Authority Key Identifier:
                keyid:E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2f:53:76:12:ab:25:47:45:59:46:8d:d5:96:29:1e:81:77:
         c4:16:14:58:85:bd:35:7f:56:27:f3:f0:f0:79:84:f1:61:ec:
         a8:58:8c:e8:0a:c5:e5:ef:01:c1:0f:74:db:7e:9c:70:22:38:
         03:6f:64:40:1d:4c:10:a8:c9:94:af:43:79:f1:8a:72:79:53:
         58:92:f4:8a:37:d1:97:2d:28:b8:11:19:c7:20:46:66:65:ac:
         f3:c1:76:1e:c3:c3:2c:27:a7:a1:67:9c:6d:be:35:ed:2d:46:
         e2:40:23:41:e1:60:e2:83:c5:3a:45:c5:66:81:4b:80:33:57:
         13:05:50:d0:3b:c1:bb:a4:11:01:43:d1:a0:46:2d:bb:25:7f:
         dc:12:68:bf:94:fa:59:2a:eb:fe:02:bf:25:d2:1f:40:71:44:
         cd:88:8a:13:0e:35:e7:bc:98:01:28:e0:c3:56:e7:db:99:01:
         e9:ee:59:7d:20:d8:d2:43:f0:22:93:d3:fe:94:21:50:de:51:
         14:dc:43:4a:52:c5:9b:8c:83:b5:d5:13:70:b9:0d:85:f9:3b:
         8c:1a:70:4c:f4:51:80:3c:4e:3c:87:b5:87:91:2b:15:18:ab:
         9e:89:e6:21:96:8f:aa:f9:af:13:4b:0e:b4:77:ef:7f:59:a7:
         87:6e:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----