<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE Envelope [ <!ENTITY dsig 'http://www.w3.org/2000/09/xmldsig#'> <!ENTITY c14n 'http://www.w3.org/TR/2001/REC-xml-c14n-20010315'> <!ENTITY xpath 'http://www.w3.org/TR/1999/REC-xpath-19991116'> <!ENTITY xslt 'http://www.w3.org/TR/1999/REC-xslt-19991116'> <!ATTLIST Notaries Id ID #IMPLIED> ]> <!-- Preamble --> <Envelope xmlns:foo="http://example.org/foo" xmlns="http://example.org/usps"> <DearSir>foo</DearSir> <Body>bar</Body> <YoursSincerely> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#" Id="signature"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference URI="http://www.w3.org/Signature/2002/04/xml-stylesheet.b64"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-1"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"> <XPath> self::text() </XPath> </Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>zyjp8GJOX69990Kkqw8ioPXGExk=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"> <XPath xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"> ancestor-or-self::dsig:SignedInfo and count(ancestor-or-self::dsig:Reference | here()/ancestor::dsig:Reference[1]) > count(ancestor-or-self::dsig:Reference) or count(ancestor-or-self::node() | id('notaries')) = count(ancestor-or-self::node()) </XPath> </Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>tQiE3GUKiBenPyp3J0Ei6rJMFv4=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-2"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>zyjp8GJOX69990Kkqw8ioPXGExk=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Manifest" URI="#manifest-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>qg4HFwsN+/WX32uH85WlJU9l45k=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#SignatureProperties" URI="#signature-properties-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>ETlEI3y7hvvAtMe9wQSz7LhbHEE=</DigestValue> </Reference> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI="#xpointer(/)"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI="#xpointer(/)"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>MkL9CX8yeABBth1RChyPx58Ls8w=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-3"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-3"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#xpointer(id('object-3'))"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#xpointer(id('object-3'))"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>419CYgyTWOTGYGBhzieWklNf7Bk=</DigestValue> </Reference> <Reference URI="#reference-2"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>VzK45P9Ksjqq5oXlKQpkGgB2CNY=</DigestValue> </Reference> <Reference Id="reference-1" URI="#manifest-reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>7/9fR+NIDz9owc1Lfsxu1JBr8uo=</DigestValue> </Reference> <Reference Id="reference-2" URI="#reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>qURlo3LSq4TWQtygBZJ0iXQ9E14=</DigestValue> </Reference> </SignedInfo> <SignatureValue> WvZUJAJ/3QNqzQvwne2vvy7U5Pck8ZZ5UTa6pIwR7GE+PoGi6A1kyw== </SignatureValue> <KeyInfo> <RetrievalMethod Type="http://www.w3.org/2000/09/xmldsig#X509Data" URI="#object-4"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"> <XPath xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"> ancestor-or-self::dsig:X509Data </XPath> </Transform> </Transforms> </RetrievalMethod> </KeyInfo> <Object Id="object-1" MimeType="text/plain">I am the text.</Object> <Object Encoding="http://www.w3.org/2000/09/xmldsig#base64" Id="object-2" MimeType="text/plain">SSBhbSB0aGUgdGV4dC4=</Object> <Object Id="object-3"> <NonCommentandus xmlns=""><!-- Commentandum --></NonCommentandus> </Object> <Object> <Manifest Id="manifest-1"> <Reference Id="manifest-reference-1" URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference URI="#reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>qURlo3LSq4TWQtygBZJ0iXQ9E14=</DigestValue> </Reference> <Reference URI="#notaries"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"> <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns="http://www.w3.org/TR/xhtml1/strict" exclude-result-prefixes="foo" version="1.0"> <xsl:output encoding="UTF-8" indent="no" method="xml" /> <xsl:template match="/"> <html> <head> <title>Notaries</title> </head> <body> <table> <xsl:for-each select="Notaries/Notary"> <tr> <th> <xsl:value-of select="@name" /> </th> </tr> </xsl:for-each> </table> </body> </html> </xsl:template> </xsl:stylesheet> </Transform> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>c7wq5XKos6RqNVJyFy7/fl6+sAs=</DigestValue> </Reference> </Manifest> </Object> <Object> <SignatureProperties Id="signature-properties-1"> <SignatureProperty Target="#signature"> <SignerAddress xmlns="urn:demo"><IP>192.168.21.138</IP></SignerAddress> </SignatureProperty> </SignatureProperties> </Object> <Object Id="object-4"> <X509Data> <X509SubjectName> CN=Merlin Hughes,OU=X/Secure,O=Baltimore Technologies Ltd.,ST=Dublin,C=IE </X509SubjectName> <X509IssuerSerial> <X509IssuerName> CN=Transient CA,OU=X/Secure,O=Baltimore Technologies Ltd.,ST=Dublin,C=IE </X509IssuerName> <X509SerialNumber>1017788370348</X509SerialNumber> </X509IssuerSerial> <X509Certificate> MIIDUDCCAxCgAwIBAgIGAOz46g2sMAkGByqGSM44BAMwbjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEVMBMGA1UEAxMMVHJhbnNpZW50IENB MB4XDTAyMDQwMjIyNTkzMFoXDTEyMDQwMjIxNTkyNVowbzELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEWMBQGA1UEAxMNTWVybGluIEh1Z2hl czCCAbcwggEsBgcqhkjOOAQBMIIBHwKBgQDd454C+qcTIWlb65NKCt2PtguNpOSn Id5woUigu7xBk2QZNAjVyIhMEfSWp8iR0IdKLx+JQLcNOrcn0Wwl5/hhW0MXsmlS 8dM5Cq2rtmDHooLxbGTPqtALE6vsXQCk5iLz3MtGh7gyQMZ7q7HT5a3I5NChUgY1 MMNQVetRA1susQIVAIQy3BStBjvx89Wq8Tjr7IDP1S8lAoGBAJ58e4W3VqMxm7Zx YJ2xZ6KX0Ze10WnKZDyURn+T9iFIFbKRFElKDeotXwwXwYON8yre3ZRGkC+2+fiU 2bdzIWTT6LMbIMVbk+07P4OZOxJ6XWL9GuYcOQcNvX42xh34DPHdq4XdlItMR25N A+OdZ4S8VVrpb4jkj4cyir1628kgA4GEAAKBgHH2KYoaQEHnqWzRUuDAG0EYXV6Q 4ucC68MROYSL6GKqNS/AUFbvH2NUxQD7aGntYgYPxiCcj94i38rgSWg7ySSz99MA R/Yv7OSd+uej3r6TlXU34u++xYvRo+sv4m9lb/jmXyZJKeC+dPqeU1IT5kCybURL ILZfrZyDsiU/vhvVozowODAOBgNVHQ8BAf8EBAMCB4AwEQYDVR0OBAoECIatY7SE lXEOMBMGA1UdIwQMMAqACIOGPkB2MuKTMAkGByqGSM44BAMDLwAwLAIUSvT02iQj Q5da4Wpe0Bvs7GuCcVsCFCEcQpbjUfnxXFXNWiFyQ49ZrWqn </X509Certificate> <X509Certificate> MIIDSzCCAwugAwIBAgIGAOz46fwJMAkGByqGSM44BAMwbjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEVMBMGA1UEAxMMVHJhbnNpZW50IENB MB4XDTAyMDQwMjIyNTkyNVoXDTEyMDQwMjIxNTkyNVowbjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEVMBMGA1UEAxMMVHJhbnNpZW50IENB MIIBtzCCASwGByqGSM44BAEwggEfAoGBAN3jngL6pxMhaVvrk0oK3Y+2C42k5Kch 3nChSKC7vEGTZBk0CNXIiEwR9JanyJHQh0ovH4lAtw06tyfRbCXn+GFbQxeyaVLx 0zkKrau2YMeigvFsZM+q0AsTq+xdAKTmIvPcy0aHuDJAxnursdPlrcjk0KFSBjUw w1BV61EDWy6xAhUAhDLcFK0GO/Hz1arxOOvsgM/VLyUCgYEAnnx7hbdWozGbtnFg nbFnopfRl7XRacpkPJRGf5P2IUgVspEUSUoN6i1fDBfBg43zKt7dlEaQL7b5+JTZ t3MhZNPosxsgxVuT7Ts/g5k7EnpdYv0a5hw5Bw29fjbGHfgM8d2rhd2Ui0xHbk0D 451nhLxVWulviOSPhzKKvXrbySADgYQAAoGAfag+HCABIJadDD9Aarhgc2QR3Lp7 PpMOh0lAwLiIsvkO4UlbeOS0IJC8bcqLjM1fVw6FGSaxmq+4y1ag2m9k6IdE0Qh5 NxB/xFkmdwqXFRIJVp44OeUygB47YK76NmUIYG3DdfiPPU3bqzjvtOtETiCHvo25 4D6UjwPpYErXRUajNjA0MA4GA1UdDwEB/wQEAwICBDAPBgNVHRMECDAGAQH/AgEA MBEGA1UdDgQKBAiDhj5AdjLikzAJBgcqhkjOOAQDAy8AMCwCFELu0nuweqW7Wf0s gk/CAGGL0BGKAhRNdgQGr5iyZKoH4oqPm0VJ9TjXLg== </X509Certificate> </X509Data> </Object> </Signature> </YoursSincerely> <PostScript>bar</PostScript> <Notaries xmlns="" Id="notaries"> <Notary name="Great, A. T." /> <Notary name="Hun, A. T." /> </Notaries> <!-- Commentary --> </Envelope> <!-- Postamble -->