Manifest

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/191/9A39239FD8B7752CD35E43227D983A7433F55A46.mft
File:                     9A39239FD8B7752CD35E43227D983A7433F55A46.mft (raw, json)
Hash identifier:          tyn/qbg9ltgQWz+3ckhGzXfh/zVcT+4U6KYrfoTnXA4=
Subject key identifier:   FE:5D:71:83:D7:0C:AA:95:C8:6D:DC:EB:54:60:E1:2C:B6:3A:6D:46
Authority key identifier: 9A:39:23:9F:D8:B7:75:2C:D3:5E:43:22:7D:98:3A:74:33:F5:5A:46
Certificate issuer:       /CN=9a39239fd8b7752cd35e43227d983a7433f55a46
Certificate serial:       01318BB92F0FC8111CB6E10C22DC41618DAD5F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjkjn9i3dSzTXkMifZg6dDP1WkY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/191/9A39239FD8B7752CD35E43227D983A7433F55A46.mft
Manifest number:          0311
Signing time:             Mon 27 Mar 2023 08:29:07 +0000
Manifest this update:     Mon 27 Mar 2023 08:24:07 +0000
Manifest next update:     Tue 28 Mar 2023 09:41:07 +0000
Files and hashes:         1: 9A39239FD8B7752CD35E43227D983A7433F55A46.crl (hash: vmZOldyyU5ZNYyh1gr7l+5yIbTujJXkBxNztwe6/OB8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:31:8b:b9:2f:0f:c8:11:1c:b6:e1:0c:22:dc:41:61:8d:ad:5f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a39239fd8b7752cd35e43227d983a7433f55a46
        Validity
            Not Before: Mar 27 08:24:07 2023 GMT
            Not After : Mar 28 09:41:07 2023 GMT
        Subject: CN=FE5D7183D70CAA95C86DDCEB5460E12CB63A6D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:b6:af:c9:5e:c3:0f:6a:7c:1e:dc:2e:06:
                    0c:86:56:18:0a:88:15:47:f1:77:e3:f5:47:d5:1b:
                    ea:37:49:3c:3a:3c:ad:f3:14:3c:14:6e:4c:37:36:
                    2e:b9:a2:09:93:9a:47:7c:3b:b3:15:b9:49:a6:10:
                    59:34:b6:f1:2d:7a:ea:00:b1:5c:7c:e5:6a:9d:4c:
                    b6:7c:fa:16:d2:d8:f2:09:72:6e:f3:e1:3f:b5:ac:
                    94:bf:b0:50:34:94:05:d0:63:db:d8:2f:23:8d:27:
                    9b:27:23:b7:73:13:47:1a:45:57:cb:fa:fe:59:66:
                    31:02:d1:97:a8:6c:b6:80:24:9f:73:fe:34:19:26:
                    e9:c6:f0:89:28:f6:4c:cb:ff:c7:94:cc:75:8b:f4:
                    4f:35:a0:ea:73:e1:70:5d:e8:e7:a9:f3:5e:ed:2c:
                    85:a7:29:d1:23:2e:c1:77:64:bf:30:f3:2e:cd:f8:
                    af:68:78:7a:3c:10:a6:96:09:7f:30:86:fe:05:bd:
                    5f:6b:8c:33:4a:7c:1b:93:ba:08:f7:d1:9b:4d:9c:
                    7d:ea:ab:35:f6:3d:9f:62:ec:9d:e2:54:b7:60:1f:
                    71:3d:e9:0c:e5:d5:dd:73:cc:3a:15:e9:36:06:1a:
                    2c:b1:c6:a8:58:ea:77:78:ea:c1:c0:d8:ba:2d:62:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5D:71:83:D7:0C:AA:95:C8:6D:DC:EB:54:60:E1:2C:B6:3A:6D:46
            X509v3 Authority Key Identifier:
                keyid:9A:39:23:9F:D8:B7:75:2C:D3:5E:43:22:7D:98:3A:74:33:F5:5A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/191/9A39239FD8B7752CD35E43227D983A7433F55A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjkjn9i3dSzTXkMifZg6dDP1WkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/191/9A39239FD8B7752CD35E43227D983A7433F55A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:aa:70:12:44:60:0f:0d:6a:b9:94:7d:00:62:e7:b6:c8:7d:
         2c:f1:b9:26:50:72:e0:95:71:1c:0e:56:c2:02:e2:b2:20:25:
         6c:dd:09:7a:0c:5c:06:a4:7b:2e:af:47:f3:32:a8:83:8e:9e:
         53:49:29:02:35:a2:c1:2a:dd:a0:ba:88:b8:a2:d8:53:d7:ce:
         32:b4:0f:ae:63:3c:00:03:92:2b:36:01:5b:5a:27:61:65:c0:
         64:70:8f:62:7f:8e:bb:30:4e:12:f0:3e:cc:25:f5:d9:89:46:
         24:be:da:c7:f2:9a:56:83:40:ed:8f:bd:cd:ad:9c:5c:39:2c:
         b1:4d:f4:71:1f:34:77:a5:cc:9d:67:6e:b1:17:0b:2d:cb:ad:
         0f:68:da:ca:25:c6:90:34:9f:1b:9f:08:db:01:b7:f7:df:ce:
         a5:a0:96:c8:e9:cb:ef:69:70:6b:7f:76:05:98:0f:f1:7f:64:
         2b:d1:4a:7a:37:ec:44:a9:3b:54:4c:b8:1b:1d:5d:aa:f6:22:
         97:4f:33:02:95:1c:8e:3a:87:32:8b:03:49:71:4b:79:e1:f3:
         6e:ec:33:1b:39:74:bb:2e:3a:a7:8a:9f:90:7a:ae:89:df:72:
         48:ef:e1:50:e3:05:de:7a:66:9f:2b:4f:b1:65:1e:ed:d8:7d:
         94:07:13:9d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUATGLuS8PyBEctuEMItxBYY2tXxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWEzOTIzOWZkOGI3NzUyY2QzNWU0MzIyN2Q5ODNhNzQz
M2Y1NWE0NjAeFw0yMzAzMjcwODI0MDdaFw0yMzAzMjgwOTQxMDdaMDMxMTAvBgNV
BAMTKEZFNUQ3MTgzRDcwQ0FBOTVDODZERENFQjU0NjBFMTJDQjYzQTZENDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HLavyV7DD2p8HtwuBgyGVhgK
iBVH8Xfj9UfVG+o3STw6PK3zFDwUbkw3Ni65ogmTmkd8O7MVuUmmEFk0tvEteuoA
sVx85WqdTLZ8+hbS2PIJcm7z4T+1rJS/sFA0lAXQY9vYLyONJ5snI7dzE0caRVfL
+v5ZZjEC0ZeobLaAJJ9z/jQZJunG8Iko9kzL/8eUzHWL9E81oOpz4XBd6Oep817t
LIWnKdEjLsF3ZL8w8y7N+K9oeHo8EKaWCX8whv4FvV9rjDNKfBuTugj30ZtNnH3q
qzX2PZ9i7J3iVLdgH3E96Qzl1d1zzDoV6TYGGiyxxqhY6nd46sHA2LotYrONAgMB
AAGjggH/MIIB+zAdBgNVHQ4EFgQU/l1xg9cMqpXIbdzrVGDhLLY6bUYwHwYDVR0j
BBgwFoAUmjkjn9i3dSzTXkMifZg6dDP1WkYwDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzE5MS85QTM5MjM5RkQ4Qjc3NTJDRDM1RTQzMjI3RDk4M0E3
NDMzRjU1QTQ2LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvbWpram45aTNkU3pU
WGtNaWZaZzZkRFAxV2tZLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuG
YHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzE5MS85QTM5MjM5RkQ4Qjc3NTJDRDM1RTQzMjI3RDk4M0E3NDMzRjU1QTQ2Lm1m
dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG
BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAAqpwEkRgDw1quZR9AGLntsh9LPG5JlBy4JVxHA5WwgLisiAlbN0J
egxcBqR7Lq9H8zKog46eU0kpAjWiwSrdoLqIuKLYU9fOMrQPrmM8AAOSKzYBW1on
YWXAZHCPYn+OuzBOEvA+zCX12YlGJL7ax/KaVoNA7Y+9za2cXDkssU30cR80d6XM
nWdusRcLLcutD2jayiXGkDSfG58I2wG399/OpaCWyOnL72lwa392BZgP8X9kK9FK
ejfsRKk7VEy4Gx1dqvYil08zApUcjjqHMosDSXFLeeHzbuwzGzl0uy46p4qfkHqu
id9ySO/hUOMF3npmnytPsWUe7dh9lAcTnQ==
-----END CERTIFICATE-----