Can the ticket be delegated?
A desciption of the resources that are being promised
The ticket must be "cashed in" by this date
An ABAC RT0 statement, used only for type 'abac'.
An ABAC assertion containing a single RT0 statement, used only for type 'abac'.
A credential granting privileges or a ticket or making an ABAC assertion.
Privileges or a ticket or an ABAC assertion
The type of this credential. Currently a Privilege set or a Ticket or ABAC.
A serial number.
GID of the owner of this credential.
URN of the owner. Not everyone can parse DER
GID of the target of this credential.
URN of the target.
UUID of this credential
Expires on in ISO8601 format but preferably RFC3339
Optional Extensions
Parent that delegated to us