Struct Basic 

pub struct Basic<'a, 'certificate> {
    pub target: &'a str,
    pub signed_properties_id: &'a str,
    pub signing_time: &'a str,
    pub certificate: &'a Certificate<'certificate>,
    pub certificate_digest_method: &'a str,
    pub certificate_digest: &'a [u8],
    pub objects: &'a [DataObject<'a>],
    pub counter_signature: Option<&'a str>,
}

Minimal interoperable B-B property construction. Optional policy, role, commitment and object timestamps remain composable in the XML draft, and are checked by the existing complete preparation/field/level pipeline.

The signing certificate is actual parsed DER. certificate_digest is the selected provider’s digest of its COMPLETE bytes, not SPKI or signed bytes. This input is not a certificate/digest binding receipt; existing certificate checks must independently bind the final signed properties to the selected key.

Fields

target: &'a str

URI targeting this Signature by its unique bare-name fragment.

signed_properties_id: &'a str

ID assigned to the new SignedProperties element.

signing_time: &'a str

Claimed UTC XML Schema dateTime, validated by the XML writer.

certificate: &'a Certificate<'certificate>

Actual whole signing certificate.

certificate_digest_method: &'a str

XML digest-method URI selected by the native provider.

certificate_digest: &'a [u8]

Complete certificate digest computed by that provider.

objects: &'a [DataObject<'a>]

Signed data objects excluding SignedProperties and the counter target.

counter_signature: Option<&'a str>

Actual parent SignatureValue URI for a baseline countersignature.

Implementations

impl Basic<'_, '_>

pub fn write<'a, B: Writer, W: Work>( &'a self, writer: &mut B, work: &W, ) -> Result<BasicReferences<'a>, Error<B::Error>>

Emit QualifyingProperties inside the owner’s one new ds:Object. The owner must include certificate in KeyInfo/X509Data and install the returned SignedInfo instructions before XMLDSig signing.

EN319132-1 §§4.4.2/5.2.2/5.2.7.2/6.3(a,h–l): direct incorporation, SigningTime, SigningCertificateV2 without Cert URI/issuer hint, and one DataObjectFormat per ordinary object. A pure countersignature has none. https://www.etsi.org/deliver/etsi_en/319100_319199/31913201/01.03.01_60/en_31913201v010301p.pdf

pub fn write_key_info<B: Writer, W: Work>( &self, writer: &mut B, work: &W, ) -> Result<(), Error<B::Error>>

Emit the mandatory original signing certificate in one X509Data, inside a new KeyInfo. No path discovery, key matching or trust is implied.