Module attribute_certificate 

Original Attribute Certificate v2 structure (RFC5755 §4.1 / Appendix B).

This reader supplies signature inputs and inspection facts, not a complete RFC5755 profile or authorization verdict. In particular, issuer forms and holder combinations outside §4.2’s profile, negative/long serials, reversed validity and unknown critical extensions remain inspectable. Holder binding, algorithm agreement/acceptance, signature math, AA trust, targeting and revocation require separate checks (§5). No public-key certificate is made from an attribute certificate, and no opaque attribute is trusted here. https://www.rfc-editor.org/rfc/rfc5755#section-4.1

Modules

clearance

Original clearance assertions (RFC5755 §4.4.6), without authorization policy.

controls

AAControls syntax and per-extension attribute restriction (RFC5755 §7.4).

encrypted

RFC5755 §7.1 targeted encrypted attributes and ciphertext-stealing defense.

ietf

Original IETF group/charging attribute values (RFC5755 §4.4).

proxy

Accounted proxy-set checks (RFC5755 §7.2), separate from AC authentication.

role

Original role assertions (RFC5755 §4.4.5 / Appendix B).

service

Original service authentication and access identities (RFC5755 §§4.4.1–4.4.2).

target

Attribute-certificate recipient targeting (RFC5755 §4.3.2 / Appendix B).

validation

RFC5755 profile and supplied-certificate checks, without an authorization verdict.

Structs

AttributeCertificate

A v2 attribute certificate’s structure and exact original signature inputs.

Holder

All independently written Holder alternatives, without choosing an identity. RFC5755 §4.2.2 recommends only one; ASN.1 permits combinations and absence.

Information

Signed v2 information, retaining original attributes and extension readers.

Issuer

Original issuer fields, without imposing the profile’s issuerName-only restriction.

IssuerSerial

Certificate identity, without looking up or authenticating a certificate.

ObjectDigestInfo

Written digest assertion. It neither hashes nor binds an object.

Enums

DigestedObject

Object selected by an explicitly written object-digest type.

IssuerForm

The encoded issuer CHOICE. V1 remains inspectable, not profile-conforming.