# Independent-issuer fingerprint vectors: the alkssh wave-1 test-key
# fixture set. Each entry pairs a committed OpenSSH ed25519 keypair (the
# .key/.pub files in this directory) with its fingerprint byte-verbatim
# from `ssh-keygen -lf` — recorded from OpenSSH_9.6p1
# (Ubuntu-3ubuntu13.20) at vector-generation time.
#
# The keys are throwaway test fixtures minted for the test suite only;
# their private halves are committed on purpose (committed keys are
# throwaway fixtures, not secrets — they are never registered anywhere
# real and never deployed).
#
# <fixture> <expected fingerprint>
alpha.pub SHA256:YyaiL42Xl8tcRRUhNCiqQBsiiRWVHHDR9hpXC45EQ6A
bravo.pub SHA256:yQf/w2wYBoZ9adDlRGbcNh7AHE3mbqWRCqoGHra1ib0
charlie.pub SHA256:b5jdwosbZUx5nsY5zfr/ZCt+4sJYehVBq7Xl/wstJ9U
delta.pub SHA256:4MiQ0KGoTEaklHBTlxPDuQkeu0FTyqEbne10K6Z8CKs
ca.pub SHA256:mPAq1aRKBuyH3gZs9IcLWtc1X3AhYi50P80mpo7XPSw
# alpha-cert.pub: the alpha user certificate (serial 1, key id
# `alkssh-fixture-alpha`, principal `git`, validity 2026–2036) — the
# ssh-keygen output above the fingerprint line is its OpenSSH text; the
# certificate's embedded public half is alpha.pub (the same fingerprint
# as alpha.pub; `ssh-keygen -lf alpha-cert.pub` reports it with the
# ED25519-CERT type). The cert was signed by the throwaway ca key at
# vector-generation time (w2-auth-bridge's auth_openssh_certificate
# decline fixture). `ca.key`'s private half is committed on the same
# fixture rationale as every other private half here.
alpha-cert.pub SHA256:YyaiL42Xl8tcRRUhNCiqQBsiiRWVHHDR9hpXC45EQ6A
