Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File:                     4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier:          QUzZCk0lH0s24QD/BiyThl7udkkBRSjxxwntPSYuDhM=
Subject key identifier:   5B:ED:35:F6:26:82:9B:A9:FD:56:8B:41:9E:E4:41:F5:C7:03:DD:AE
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       3B00867BCE55A540BAF008E58D4D35695AE2C1EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number:          91
Signing time:             Sun 13 Apr 2025 02:47:06 +0000
Manifest this update:     Sun 13 Apr 2025 02:42:06 +0000
Manifest next update:     Mon 14 Apr 2025 03:03:06 +0000
Files and hashes:         1: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=)
                          2: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=)
                          3: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: JQgCpmOcdOl/ncOnZ1j0QjfRiz2UEKYNdwIFD+RkpRQ=)
                          4: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=)
                          5: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=)
                          6: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=)
                          7: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:00:86:7b:ce:55:a5:40:ba:f0:08:e5:8d:4d:35:69:5a:e2:c1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Apr 13 02:42:06 2025 GMT
            Not After : Apr 14 03:03:06 2025 GMT
        Subject: CN=5BED35F626829BA9FD568B419EE441F5C703DDAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:1a:ca:28:89:0a:87:c1:52:a0:d6:87:44:
                    4d:3f:2e:17:51:13:5e:36:3e:29:da:84:f4:e1:9e:
                    bf:52:d3:61:02:f7:18:74:f1:2b:0c:14:75:44:99:
                    b7:b5:a4:56:8c:4c:07:cf:3c:33:00:18:74:1a:4f:
                    a3:a3:9c:e1:b6:b1:71:62:ff:58:17:50:9b:69:e4:
                    19:57:a3:57:60:be:f6:9f:f8:a4:8f:0c:c1:01:79:
                    85:f8:a5:51:58:20:dc:ec:8c:06:eb:14:a2:7c:0c:
                    67:6f:2e:30:7e:6a:27:66:e6:a0:69:4a:b0:07:45:
                    ea:1b:b2:d6:32:f5:d0:78:4e:22:39:ff:f7:a5:18:
                    91:a5:50:f6:22:be:cd:e7:dc:38:23:d1:84:bd:5d:
                    bd:ca:7a:75:4c:45:9d:36:eb:23:de:7b:0f:a0:f4:
                    4c:4a:af:f8:42:02:84:e9:2f:aa:9f:54:77:d4:d3:
                    6e:cd:29:99:5d:18:60:e5:00:e1:39:67:b6:ed:95:
                    35:3a:fe:4d:20:b6:fb:7c:49:09:1c:4e:eb:1b:d0:
                    72:de:7d:42:3b:6e:18:25:6c:be:85:55:de:fa:36:
                    9a:b1:63:f7:0c:26:84:25:21:25:ab:1c:dd:a8:8e:
                    83:61:ec:89:28:0d:9d:dc:2f:49:ca:b7:3e:07:b2:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:ED:35:F6:26:82:9B:A9:FD:56:8B:41:9E:E4:41:F5:C7:03:DD:AE
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:47:e5:97:ec:09:be:73:8b:46:05:da:32:8e:89:48:0e:c5:
         58:78:8b:29:7a:15:8e:cd:34:e8:cd:9e:bc:bf:25:7a:71:e8:
         69:6d:6b:35:f5:46:8f:5c:00:d9:7a:ab:33:44:f4:bb:82:35:
         a9:b2:44:d2:24:98:44:67:96:8a:ba:bf:fe:81:a6:00:97:51:
         73:04:5f:ab:52:1c:65:8f:5b:dc:eb:3a:4c:1c:d4:97:0f:cf:
         c0:ae:c4:80:ae:95:a4:8c:91:07:d6:c3:bd:78:ce:92:f6:a2:
         70:c5:d0:66:f9:36:73:a9:cd:63:43:2b:9d:69:f7:7f:95:85:
         e9:39:24:71:9a:8a:98:da:e4:43:cd:3f:0d:e9:9d:b5:f6:f9:
         43:5b:98:a2:0e:16:4d:e3:43:a9:ca:91:a0:79:87:dc:10:dd:
         c9:17:0f:32:c0:e3:e7:6a:0d:fc:0d:2e:e6:72:ea:98:56:3e:
         dc:69:ed:1a:7e:af:ec:f6:85:3e:85:60:f3:8e:0b:b1:8c:ba:
         af:a0:e0:ba:3b:f6:75:0e:ef:38:31:69:b6:c5:1c:c6:ba:11:
         e8:9e:34:f0:60:b6:52:27:86:a8:70:e2:75:65:66:e6:0b:9c:
         65:29:c8:1e:1d:8b:ca:fe:db:01:5a:dd:18:f0:53:ec:b6:5e:
         1d:02:5b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----