Manifest

$ rpki-client -vvf krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft
File:                     CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft (raw, json)
Hash identifier:          9C9RIrQ04xtf3H3J+kWgcY+OPH6C/xH39juLJQ+4BOQ=
Subject key identifier:   02:2B:44:48:DB:48:69:0D:ED:C4:35:F6:8E:A6:10:ED:68:25:12:BF
Authority key identifier: CB:E2:97:A1:7E:E0:4D:76:DA:67:AF:E1:68:00:9C:B7:74:BD:DE:45
Certificate issuer:       /CN=cbe297a17ee04d76da67afe168009cb774bdde45
Certificate serial:       2CDCC80E87DEDC77780C8F4D01473C7ED1228A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-KXoX7gTXbaZ6_haACct3S93kU.cer
Subject info access:      rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft
Manifest number:          05
Signing time:             Sat 23 Aug 2025 11:22:07 +0000
Manifest this update:     Sat 23 Aug 2025 11:17:07 +0000
Manifest next update:     Sun 24 Aug 2025 13:15:07 +0000
Files and hashes:         1: AS60900.asa (hash: jy+iAvmyMiN5H2IacowvQ3j6m99HCNfoQ7KTOb/hgG4=)
                          2: CBE297A17EE04D76DA67AFE168009CB774BDDE45.crl (hash: Y9Hg6SozQzBled9AcX7zoirW+Q+aTs+bs0LbN9+3jQA=)
Validation:               OK
Signature path:           rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.crl
                          rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-KXoX7gTXbaZ6_haACct3S93kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:dc:c8:0e:87:de:dc:77:78:0c:8f:4d:01:47:3c:7e:d1:22:8a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe297a17ee04d76da67afe168009cb774bdde45
        Validity
            Not Before: Aug 23 11:17:07 2025 GMT
            Not After : Aug 24 13:15:07 2025 GMT
        Subject: CN=022B4448DB48690DEDC435F68EA610ED682512BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:cf:ee:2f:7a:bd:3c:16:08:a6:06:1b:2a:
                    9c:c5:86:dc:6e:1b:9e:77:43:8f:e6:e0:da:6f:2f:
                    12:9d:47:8a:d0:5a:75:5a:0f:cb:6a:8a:0e:c5:8f:
                    71:ef:c2:d3:f1:f8:c2:8b:22:ff:82:e1:fe:18:27:
                    82:85:8e:a7:b8:72:b4:05:8e:bb:f8:9d:be:ea:b8:
                    68:db:3b:8d:47:da:da:ee:ee:de:f3:7c:53:a6:3e:
                    90:cb:fb:60:ae:4f:2e:bb:86:24:7c:f7:b3:b4:9d:
                    f9:76:91:2c:9d:df:29:2a:af:9c:54:d0:fa:5e:71:
                    c4:15:f6:be:2f:86:de:98:72:fc:0a:00:0c:63:1f:
                    04:c0:35:e6:e8:ba:41:ea:75:d9:45:2c:3f:11:15:
                    74:ed:a3:1c:63:6d:48:25:22:4e:be:e9:0c:5e:54:
                    2c:63:46:5f:37:37:96:86:a4:6c:37:02:92:43:19:
                    31:cf:14:1b:aa:51:53:7f:3f:11:3d:98:b5:28:43:
                    70:75:a2:ae:b4:94:bb:a9:00:bc:54:d1:89:8d:38:
                    14:75:72:d8:cf:f2:c2:21:b6:21:70:71:ef:cb:0c:
                    d7:2d:cc:d9:e8:04:22:af:ad:28:42:d8:77:60:c9:
                    13:87:0a:5d:da:44:50:0a:6e:80:b3:fa:5f:78:48:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2B:44:48:DB:48:69:0D:ED:C4:35:F6:8E:A6:10:ED:68:25:12:BF
            X509v3 Authority Key Identifier:
                keyid:CB:E2:97:A1:7E:E0:4D:76:DA:67:AF:E1:68:00:9C:B7:74:BD:DE:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-KXoX7gTXbaZ6_haACct3S93kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/5/CBE297A17EE04D76DA67AFE168009CB774BDDE45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d6:d2:d4:e7:18:9a:19:4c:b5:f5:d3:44:33:a0:b6:1e:a5:
         98:11:f2:d8:1e:b8:f0:3b:ce:85:f0:ee:f4:2c:02:7f:4c:4e:
         47:92:e5:f4:d9:e1:bf:f2:fd:f3:dc:0f:a5:25:72:cb:7a:34:
         b9:24:5f:46:d5:86:61:fe:eb:01:90:cd:60:b2:0f:11:9c:65:
         03:ad:9a:83:8f:64:bb:4e:52:f6:8b:2b:e4:a8:25:74:e8:0f:
         9f:ba:fa:95:80:d0:15:ae:cd:6f:d4:b2:d6:70:4c:17:4a:f5:
         8b:3e:ab:2e:6b:6a:5f:bb:db:5e:42:92:ba:d4:3d:f6:0a:4d:
         b4:89:73:cf:ba:ec:c9:19:d8:f1:ee:76:5b:c1:d7:ce:8c:2e:
         56:36:c8:1d:06:b1:15:2e:55:6d:76:2f:aa:b7:e6:83:b4:5e:
         1b:a0:7e:b8:3b:ae:a9:07:59:4c:4f:7b:6c:cd:fa:d6:a8:dc:
         c4:de:a1:cc:4c:73:7c:aa:a7:d0:16:7e:39:76:8e:53:00:6f:
         95:15:a3:a8:e2:90:74:9a:27:0f:8a:c1:d3:0a:69:88:14:46:
         1c:86:96:0a:f0:6b:56:cc:cf:95:5b:eb:8a:76:9d:0c:a2:c1:
         7b:2c:2c:a4:d8:87:2d:e6:d8:ad:8c:1a:8b:4f:97:60:cd:88:
         ae:d8:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:19 2025 by rpki-client