rpkimancer.cert.ee module

RPKI EE Certificate implementation - RFC6487.

class rpkimancer.cert.ee.EECertificate(*, signed_object, **kwargs)

Bases: BaseResourceCertificate

RPKI EE Certificate - RFC6487.

Parameters:
property signed_object: SignedObject

Get the SignedObject that this certificate signs.

property issuer_repo_path: str

Get the filesystem path to the the issuer publication point.

property mft_entry: Optional[Tuple[str, bytes]]

Get an entry for inclusion in the issuer’s manifest.

property sia: Optional[SubjectInformationAccess]

Get the SubjectInformationAccess extension for the certificate.

sign_object()

Construct a signature over the signedAttrs of the SignedObject.

Return type:

bytes

publish(*, pub_path, **kwargs)

Publish the SignedObject artifact as a DER file in the PP.

Parameters:

  • pub_path (str) –

  • kwargs (Any) –

Return type:

None