Manifest

$ rpki-client -vvf krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft
File:                     CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft (raw, json)
Hash identifier:          u5G5E0lcsz1DRLHZTahuit7k1yYClAAOLEfAmlM9agk=
Subject key identifier:   E9:B8:03:63:8A:D4:FA:65:10:35:5C:74:40:E2:06:4D:38:32:5E:57
Authority key identifier: CB:E2:97:A1:7E:E0:4D:76:DA:67:AF:E1:68:00:9C:B7:74:BD:DE:45
Certificate issuer:       /CN=cbe297a17ee04d76da67afe168009cb774bdde45
Certificate serial:       445FC6FC05BE15A4A655EE1A4423CCC69260F88B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-KXoX7gTXbaZ6_haACct3S93kU.cer
Subject info access:      rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft
Manifest number:          16
Signing time:             Thu 04 Sep 2025 17:13:06 +0000
Manifest this update:     Thu 04 Sep 2025 17:08:06 +0000
Manifest next update:     Fri 05 Sep 2025 18:25:06 +0000
Files and hashes:         1: AS60900.asa (hash: Mv7d3EBHDmNRsAy8LWPeJtptnjW1PjDaVbFHNDSF0zY=)
                          2: CBE297A17EE04D76DA67AFE168009CB774BDDE45.crl (hash: dlrDJYOrJ6fF0v22qDU7lZUYFEkLLLcPD5QZf2wFEWk=)
Validation:               OK
Signature path:           rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.crl
                          rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-KXoX7gTXbaZ6_haACct3S93kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 18:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5f:c6:fc:05:be:15:a4:a6:55:ee:1a:44:23:cc:c6:92:60:f8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe297a17ee04d76da67afe168009cb774bdde45
        Validity
            Not Before: Sep  4 17:08:06 2025 GMT
            Not After : Sep  5 18:25:06 2025 GMT
        Subject: CN=E9B803638AD4FA6510355C7440E2064D38325E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:21:b2:bb:7b:08:18:e9:cf:1b:f5:bb:08:
                    b8:a6:09:59:85:bd:a6:b1:13:4c:46:6a:47:ff:f5:
                    56:be:21:a4:e7:f3:9b:23:27:55:00:86:17:6b:1d:
                    9a:f8:f2:e9:92:1d:e3:0c:ec:6d:9e:d2:cc:03:0e:
                    99:1e:47:2a:b9:f2:18:3d:c2:21:01:c9:17:a5:fa:
                    68:4d:24:9b:10:6f:30:40:8a:7c:55:a5:a1:d0:76:
                    80:ba:ca:4f:e2:ff:b2:1f:71:4c:95:41:55:d5:94:
                    e5:33:d5:b4:46:bd:43:46:bf:c5:64:1e:77:22:61:
                    3d:65:83:82:89:bf:27:97:ab:60:9e:e0:72:7b:ae:
                    f8:32:fa:11:15:fd:cb:da:41:29:65:27:e7:00:f3:
                    93:57:f2:f2:0e:02:66:b4:37:5c:4c:1f:a2:23:a2:
                    ff:5e:7a:8c:31:60:96:11:37:f6:09:56:e8:93:d8:
                    66:30:4e:6f:84:cb:8e:67:a7:fd:0a:2d:1b:6f:04:
                    28:2c:b1:bb:2f:5c:ad:2c:b6:94:0c:29:d5:ea:d7:
                    7f:77:06:75:6a:af:69:92:66:ef:6f:60:0e:90:be:
                    48:3f:7d:ef:72:f0:4a:1c:43:f8:8d:0e:c1:38:ca:
                    f2:09:2c:18:e3:14:df:fe:e0:d2:83:2c:66:81:51:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B8:03:63:8A:D4:FA:65:10:35:5C:74:40:E2:06:4D:38:32:5E:57
            X509v3 Authority Key Identifier:
                keyid:CB:E2:97:A1:7E:E0:4D:76:DA:67:AF:E1:68:00:9C:B7:74:BD:DE:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-KXoX7gTXbaZ6_haACct3S93kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ce:0f:04:35:ef:01:73:a3:51:71:90:a6:81:0e:5e:7d:66:
         e8:0b:91:9b:60:d4:be:08:b9:e2:13:ad:2f:a5:49:3e:61:1c:
         7c:13:e6:7d:57:ee:40:58:50:c7:d2:53:2e:52:7b:b9:64:de:
         57:09:61:87:0f:89:08:f1:24:5a:30:d9:d6:08:59:a8:f3:02:
         5f:6f:fd:e1:96:b2:ee:5e:32:85:0e:3c:ae:77:35:cb:b9:0f:
         de:db:b8:da:ec:81:26:87:ac:7d:a4:cf:4d:96:bb:f6:4e:15:
         29:f8:03:b9:78:53:9b:de:16:e4:f9:82:0b:cd:44:03:f8:2f:
         6b:bc:07:b4:6b:1b:b5:95:fb:57:ea:40:2b:4c:13:cc:86:c7:
         30:d8:a3:cd:25:f2:12:49:94:fe:dc:f1:bd:28:c3:15:91:9c:
         10:65:d0:14:5f:b1:d6:db:47:38:19:95:ee:20:4b:9d:17:5c:
         f6:3e:46:1d:4b:0e:16:0d:7c:eb:32:5a:f5:4f:64:cc:ca:04:
         49:3e:7e:df:9e:34:d8:27:66:1b:a8:87:a2:a7:81:0b:e6:09:
         9f:2e:c9:15:c2:93:c3:82:9c:ba:ba:02:30:e6:7f:ad:e9:48:
         01:1e:8c:8c:19:39:77:48:65:47:ee:7d:bc:f1:fc:1a:a8:cd:
         5e:fa:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:20:25 2025 by rpki-client