Question about data stuctures

[sgpinkus]

Trying to understand fields of some of the log entries I'm seeing. Specifically following is the body HashedRekordObj, and a DSSE of a published asset. I can see that the large lumps of base64 are x509 certs issue by sigstore.dev. But what are the spec.signature.content (HashedRekordObj) and spec.signatures[0].signatures (DSSE) field for? Looked at the JSON Schema for these types but it wasn't very enlightening for me. Is it the signature of the hash/digest with the public key?

$ curl https://rekor.sigstore.dev/api/v1/log/entries/108e9186e8c5677a7376c5894aa51f031bcb842e5d1dafbae61ae870e405693d4ff366a22b347797 | jq -r '.[].body' | base64  -d | jq .
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  7241    0  7241    0     0  12614      0 --:--:-- --:--:-- --:--:-- 12593
{
  "apiVersion": "0.0.1",
  "kind": "hashedrekord",
  "spec": {
    "data": {
      "hash": {
        "algorithm": "sha256",
        "value": "6eb413cd0957b97dce2d15e09cdefda511237b8289ac731b987b92a595d6a9f1"
      }
    },
    "signature": {
      "content": "MEQCIHvMXyvoLN60zuzKNeL5iP+oY5BmjW7W5L0Vv1QISgcrAiBRBx2J1tgDAWpP7bjQHRdKeESs3l4Y2cGc12858OID9A==",
      "publicKey": {
        "content": "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"
      }
    }
  }
}
$ curl https://rekor.sigstore.dev/api/v1/log/entries/108e9186e8c5677a3459699e3080d9d85825071ff5da9cd4e18158495ca254230a38c0005cfb1c2c | jq -r '.[].body' | base64  -d | jq .
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  7361    0  7361    0     0   9801      0 --:--:-- --:--:-- --:--:--  9801
{
  "apiVersion": "0.0.1",
  "kind": "dsse",
  "spec": {
    "envelopeHash": {
      "algorithm": "sha256",
      "value": "ee00a733def6077da4c61ca98e87132f91561da08c960531a50d7035d0b08a0c"
    },
    "payloadHash": {
      "algorithm": "sha256",
      "value": "84d9827927d058c822c9cc2ca4ca27f681f3799e246d38ce543e6cd6bb33342d"
    },
    "signatures": [
      {
        "signature": "MEUCIQDXKSe1EC0Zqn6Rk6YDvHaXEwS9odLWd7SJP0EjIme1jAIgM5ixA4qhUhGFd3SuKF4G/1Ye9M9YZXFcotaKDpFBdBI=",
        "verifier": "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"
      }
    ]
  }
}