Manifest

$ rpki-client -vvf krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft
File:                     5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft (raw, json)
Hash identifier:          FstVnbSJSPyTNBgXVeoeS4PF6LPMIEKifIjmWExOY4U=
Subject key identifier:   0B:45:80:76:1E:10:10:A1:FC:53:DB:8C:FB:F5:B6:CA:AA:8C:F6:B3
Authority key identifier: 53:36:A1:DC:9C:53:85:8F:5D:43:75:51:05:1B:B2:14:BF:1C:5A:BB
Certificate issuer:       /CN=5336a1dc9c53858f5d437551051bb214bf1c5abb
Certificate serial:       188021565D7087D462AEEE4793DACE3494EB4242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uzah3JxThY9dQ3VRBRuyFL8cWrs.cer
Subject info access:      rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft
Manifest number:          01A3
Signing time:             Sun 10 Aug 2025 02:56:31 +0000
Manifest this update:     Sun 10 Aug 2025 02:51:31 +0000
Manifest next update:     Mon 11 Aug 2025 05:05:31 +0000
Files and hashes:         1: AS60900.asa (hash: Q5t+SaI6ALV8BbCF7oyZ7l4zbVpp4852Fv+tFSSA3sw=)
                          2: 5336A1DC9C53858F5D437551051BB214BF1C5ABB.crl (hash: RUKIGrS87J3ZH402c0xBgWPUaNhWzU3C8zRDFHVVV2Q=)
Validation:               OK
Signature path:           rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.crl
                          rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uzah3JxThY9dQ3VRBRuyFL8cWrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 05:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:80:21:56:5d:70:87:d4:62:ae:ee:47:93:da:ce:34:94:eb:42:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5336a1dc9c53858f5d437551051bb214bf1c5abb
        Validity
            Not Before: Aug 10 02:51:31 2025 GMT
            Not After : Aug 11 05:05:31 2025 GMT
        Subject: CN=0B4580761E1010A1FC53DB8CFBF5B6CAAA8CF6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:d6:34:6d:31:85:fb:b4:da:68:e2:96:ec:
                    a9:62:e3:cd:21:89:ab:08:62:47:ea:21:06:7f:76:
                    f7:1f:94:bc:00:ab:00:47:2a:1b:22:bb:58:d8:26:
                    09:64:33:56:6b:fb:ee:d1:d1:7c:75:0e:50:32:cc:
                    b8:11:f4:72:08:ff:1a:ff:d0:86:14:a7:66:9b:82:
                    ae:39:75:3e:d1:57:6a:82:29:7e:90:1f:58:0e:94:
                    d0:5b:aa:4d:b9:c8:3d:ca:64:73:b2:24:60:dd:f0:
                    a7:b0:4f:93:7c:68:24:3d:03:89:e1:a3:23:d9:a4:
                    7e:a8:98:64:f0:96:fe:37:f1:16:6e:a2:28:ff:eb:
                    51:7f:9a:4e:6d:38:99:cb:c1:f8:fe:a5:5c:24:db:
                    40:3a:e7:9b:17:6d:cb:75:a1:3a:d0:82:0c:08:a3:
                    0a:52:42:67:01:f8:b4:b2:c5:92:3d:5b:e1:7f:e8:
                    33:c3:96:b8:6d:1c:6e:31:2b:77:9c:39:93:7f:1b:
                    97:01:33:2a:f7:f1:7b:81:d7:88:bd:e3:a2:5a:f2:
                    25:65:a9:5e:a7:f0:00:c1:60:53:86:bd:6b:d3:6f:
                    95:c9:2a:04:cf:1a:0d:33:f1:c5:a0:51:6f:eb:13:
                    b6:af:26:43:20:08:16:c8:7b:f3:34:d9:1b:8b:49:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:45:80:76:1E:10:10:A1:FC:53:DB:8C:FB:F5:B6:CA:AA:8C:F6:B3
            X509v3 Authority Key Identifier:
                keyid:53:36:A1:DC:9C:53:85:8F:5D:43:75:51:05:1B:B2:14:BF:1C:5A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uzah3JxThY9dQ3VRBRuyFL8cWrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/0/5336A1DC9C53858F5D437551051BB214BF1C5ABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1e:0a:8a:b0:4a:9f:96:6a:ba:d7:1a:7f:82:0e:80:26:5a:
         3b:4c:81:d7:4f:98:bb:50:02:1c:72:fa:a3:5f:98:65:b6:40:
         c6:62:d6:c0:bc:58:d1:e6:e5:93:34:33:96:1f:33:21:96:06:
         f1:87:87:c2:67:64:9a:55:53:c3:cd:a0:9d:37:23:36:00:46:
         11:ce:d6:a0:df:c9:78:d9:ef:dc:c2:9d:c8:43:a2:97:e7:96:
         60:b2:21:cf:76:d9:e8:5a:d6:67:cd:37:f7:2c:d8:f4:af:18:
         92:7a:f0:71:a0:b0:5e:59:cf:f3:b2:d0:44:25:27:9c:a6:ec:
         70:28:35:08:d4:2a:65:0a:e3:c8:de:68:53:b2:47:a0:5a:f1:
         c1:1f:67:99:4a:bf:13:49:6e:c2:7e:10:09:9b:a5:a0:86:b2:
         22:48:e8:13:ee:5f:50:7e:d4:85:1d:26:ba:95:19:c5:bd:7e:
         3e:3d:e9:b0:4e:7b:c9:c4:e3:a9:79:49:51:f1:80:c6:2d:5a:
         a0:56:72:80:14:36:02:63:48:48:94:97:fe:5a:b3:83:58:ed:
         f8:99:4a:4c:56:ba:71:38:ff:84:9c:72:c8:18:a3:ad:0d:10:
         ad:86:a9:e7:98:21:0c:30:cb:7e:7e:c0:9b:58:fe:32:27:2d:
         a2:ea:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:02 2025 by rpki-client