Manifest

$ rpki-client -vvf krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft
File:                     5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft (raw, json)
Hash identifier:          Qw4/RkIuLql8C7GuPqkUilJjustXdodRHEp0CbbC5cQ=
Subject key identifier:   F2:F3:74:D7:6A:95:4F:3F:1D:E1:FB:E5:66:9F:98:B4:1E:9B:08:A3
Authority key identifier: 53:36:A1:DC:9C:53:85:8F:5D:43:75:51:05:1B:B2:14:BF:1C:5A:BB
Certificate issuer:       /CN=5336a1dc9c53858f5d437551051bb214bf1c5abb
Certificate serial:       5E4ABA0D4056AAB5715A81E5F3419E86F56D2459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uzah3JxThY9dQ3VRBRuyFL8cWrs.cer
Subject info access:      rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft
Manifest number:          0185
Signing time:             Sun 20 Jul 2025 17:46:47 +0000
Manifest this update:     Sun 20 Jul 2025 17:41:47 +0000
Manifest next update:     Mon 21 Jul 2025 19:13:47 +0000
Files and hashes:         1: AS60900.asa (hash: dSp6FhjZYstGG9Dtz5Fxzu+F/h9rAwGdWe3rzlMhK48=)
                          2: 5336A1DC9C53858F5D437551051BB214BF1C5ABB.crl (hash: zE8QjZ2E69rhUUdzQlsVqDEB101nnLlp+1VJQ4DGaXY=)
Validation:               OK
Signature path:           rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.crl
                          rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uzah3JxThY9dQ3VRBRuyFL8cWrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4a:ba:0d:40:56:aa:b5:71:5a:81:e5:f3:41:9e:86:f5:6d:24:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5336a1dc9c53858f5d437551051bb214bf1c5abb
        Validity
            Not Before: Jul 20 17:41:47 2025 GMT
            Not After : Jul 21 19:13:47 2025 GMT
        Subject: CN=F2F374D76A954F3F1DE1FBE5669F98B41E9B08A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:3e:94:34:82:2e:ed:ed:39:7c:99:f4:71:
                    76:6d:10:8b:8e:06:8a:ed:64:1f:ab:90:5d:31:b4:
                    21:56:c2:0b:63:bd:36:7c:0f:4a:f6:e0:cf:ec:ea:
                    90:c1:e0:74:50:80:3e:58:5d:57:3b:9e:fa:1a:71:
                    59:37:78:e8:08:15:37:73:45:6e:6c:ce:eb:11:f9:
                    4d:9b:8d:2d:32:5e:88:53:42:eb:03:e3:2b:30:c7:
                    1e:be:a1:38:26:0e:92:77:cb:e5:6e:9e:98:ba:41:
                    32:62:54:44:28:f7:ca:de:36:40:41:dc:46:14:d5:
                    c1:05:18:f2:0b:21:2a:7b:5e:a8:2c:5f:ef:35:31:
                    4a:bc:21:e4:23:7d:df:b3:06:fa:45:ed:37:44:e8:
                    e3:00:12:cd:3c:af:b3:5e:a5:7e:f8:b6:b7:61:37:
                    aa:12:50:d0:b6:e1:b1:09:17:55:55:72:90:5f:bc:
                    82:0c:f0:6c:24:31:32:c1:3e:86:7f:0c:95:15:ea:
                    08:f7:f3:30:63:15:49:86:7b:53:32:d1:45:81:af:
                    07:1d:fb:da:55:33:2c:0e:6b:c1:90:48:95:a1:a3:
                    c4:28:6e:cb:df:17:f0:b3:d8:bf:85:d9:65:fd:96:
                    7e:4b:44:5f:c8:81:91:7e:d6:84:1e:a7:27:c9:00:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F3:74:D7:6A:95:4F:3F:1D:E1:FB:E5:66:9F:98:B4:1E:9B:08:A3
            X509v3 Authority Key Identifier:
                keyid:53:36:A1:DC:9C:53:85:8F:5D:43:75:51:05:1B:B2:14:BF:1C:5A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uzah3JxThY9dQ3VRBRuyFL8cWrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8a:74:72:5d:c3:7c:36:f1:34:15:29:63:b4:84:39:9e:68:
         bd:6a:70:fb:34:97:9c:f7:5c:69:6d:1a:98:81:be:5c:09:17:
         7f:92:65:67:2b:87:b2:24:32:6a:bb:d3:38:bb:ee:86:37:96:
         39:c9:21:25:25:e8:49:38:b7:3a:52:46:f2:cc:29:da:a1:30:
         24:e6:bc:cd:1b:02:a4:ea:16:ba:95:a5:5b:b1:ec:da:1e:ed:
         5d:f8:c2:dc:de:e0:ec:06:61:bd:ae:5c:54:3d:35:6a:60:c8:
         ab:dc:4e:c0:d2:1e:90:39:68:4f:9f:d8:bd:3d:78:63:7f:94:
         82:75:fe:ea:d1:a1:06:8d:cd:f1:7e:27:11:94:8d:36:db:39:
         ca:4e:45:ec:8f:a1:a0:67:31:ab:80:73:00:14:6f:4d:c4:3d:
         12:b7:b7:c0:ff:8e:c8:69:b2:03:8b:04:83:74:c1:db:5a:bb:
         1b:9a:a3:7d:eb:76:4c:26:d2:12:88:7c:50:24:a9:0f:93:91:
         37:d3:4a:96:52:3a:66:89:f1:69:db:af:49:3f:c3:cf:f5:0d:
         35:49:1b:ab:b6:6b:36:45:99:f0:31:f0:f5:b5:c2:ae:31:5e:
         a7:6f:18:4b:6a:0b:19:30:88:9e:15:d8:2e:23:f9:76:b9:05:
         69:89:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:14:24 2025 by rpki-client