Folgende Personenbindung wurde gelesen:
<?xml version="1.0" encoding="UTF-8"?>
<saml:Assertion AssertionID="szr.bmi.gv.at-AssertionID1086963510976445" IssueInstant="2004-06-11T14:18:30+01:00" Issuer="http://portal.bmi.gv.at/ref/szr/issuer" MajorVersion="1" MinorVersion="0" xmlns:pr="http://reference.e-government.gv.at/namespace/persondata/20020228#" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:si="http://www.w3.org/2001/XMLSchema-instance"><saml:AttributeStatement><saml:Subject><saml:SubjectConfirmation><saml:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:sender-vouches</saml:ConfirmationMethod><saml:SubjectConfirmationData><pr:Person si:type="pr:PhysicalPersonType"><pr:Identification><pr:Value>xxxxxxxxxxxxxxxxxxxxxx==</pr:Value><pr:Type>urn:publicid:gv.at:baseid</pr:Type></pr:Identification><pr:Name><pr:GivenName>Gregor</pr:GivenName><pr:FamilyName primary="undefined">Karlinger</pr:FamilyName></pr:Name><pr:DateOfBirth>xxxx-xx-xx</pr:DateOfBirth></pr:Person></saml:SubjectConfirmationData></saml:SubjectConfirmation></saml:Subject><saml:Attribute AttributeName="CitizenPublicKey" AttributeNamespace="urn:publicid:gv.at:namespaces:identitylink:1.2"><saml:AttributeValue><dsig:RSAKeyValue><dsig:Modulus>2uecY3rCI7Kr+uyRqwF/9PPiCsQoj40EC4OA7lqo5s0MEB48hIxDacU1fafOhI3HuPt6yXgp2DJK
YmRlaz+cSukTl8HyUc5+s9EPrV2h1L42HCJFaWb4j65r6Y7BHXx+D8LC3dildmKHNn6O7t4WXFGJ
8e0okIs6V3oi90V0UK0=</dsig:Modulus><dsig:Exponent>AQAB</dsig:Exponent></dsig:RSAKeyValue></saml:AttributeValue></saml:Attribute><saml:Attribute AttributeName="CitizenPublicKey" AttributeNamespace="urn:publicid:gv.at:namespaces:identitylink:1.2"><saml:AttributeValue><dsig:RSAKeyValue><dsig:Modulus>oAVi+cMJRQjHzdcrd6J8SNxMHeWme8E/piemi3B6hT1cixCMoS9jlTkEOgmZBua2XvHcSE6oTRcy
IQuQEF9SAzNaAdtEb+M6IuYbSPOOOCkxgbxkDMoQISTOUMWkKTX+dK24VvkLcTemNYR47zr1qcU1
AHr86GTyyzYPWByMauk=</dsig:Modulus><dsig:Exponent>AQAB</dsig:Exponent></dsig:RSAKeyValue></saml:AttributeValue></saml:Attribute></saml:AttributeStatement><dsig:Signature><dsig:SignedInfo><dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><dsig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><dsig:Reference URI=""><dsig:Transforms><dsig:Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"><dsig:XPath>not(ancestor-or-self::pr:Identification)</dsig:XPath></dsig:Transform><dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/></dsig:Transforms><dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><dsig:DigestValue>zG3pT6UcZyA6rBeRdBHZ+LNg5tI=</dsig:DigestValue></dsig:Reference><dsig:Reference Type="http://www.w3.org/2000/09/xmldsig#Manifest" URI="#manifest"><dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><dsig:DigestValue>L2EE8EuTwB/NfyDFzE3UL+d6p7k=</dsig:DigestValue></dsig:Reference></dsig:SignedInfo><dsig:SignatureValue>
FB8d6aGqC2w7vrxmHOE5fP+x3BH72KS9kI+vnns4hlua9A6f8PsJ6YPKqT1Y/Ow0PWs9a0gaPB/u
m+TQzr1q2IAdI01ftMcy1AiffsL578ZiYbX3LKadEc4pgwoZsvxHpXUaBfpy8adBjSuMoeklD4bC
oLbwmQAKHXf+w2cvv1Q=
</dsig:SignatureValue><dsig:KeyInfo><dsig:X509Data><dsig:X509Certificate>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</dsig:X509Certificate></dsig:X509Data></dsig:KeyInfo><dsig:Object><dsig:Manifest Id="manifest"><dsig:Reference URI=""><dsig:Transforms><dsig:Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"><dsig:XPath>not(ancestor-or-self::dsig:Signature)</dsig:XPath></dsig:Transform></dsig:Transforms><dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><dsig:DigestValue>9C/gzzTy297dZ1kqYC5zBReeqTE=</dsig:DigestValue></dsig:Reference></dsig:Manifest></dsig:Object></dsig:Signature></saml:Assertion>Folgende Signatur ist eingelangt:
<?xml version="1.0" encoding="UTF-8"?> <dsig:Signature Id="signature-28122004132954494" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><dsig:SignedInfo><dsig:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"/><dsig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><dsig:Reference Id="reference-0-28122004132954494" URI="#signed-data-0-28122004132954494"><dsig:Transforms><dsig:Transform Algorithm="http://www.w3.org/2002/06/xmldsig-filter2"><xpf:XPath Filter="intersect" xmlns:xpf="http://www.w3.org/2002/06/xmldsig-filter2">//*[@Id='signed-data-0-28122004132954494']/node()</xpf:XPath></dsig:Transform></dsig:Transforms><dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><dsig:DigestValue>cPU8PiBcqcXeGQuvP11S3TUcAaA=</dsig:DigestValue></dsig:Reference><dsig:Reference Id="etsi-its-0-28122004132954494" Type="http://uri.etsi.org/01903/v1.1.1#SignedProperties" URI=""><dsig:Transforms><dsig:Transform Algorithm="http://www.w3.org/2002/06/xmldsig-filter2"><xpf:XPath Filter="intersect" xmlns:etsi="http://uri.etsi.org/01903/v1.1.1#" xmlns:xpf="http://www.w3.org/2002/06/xmldsig-filter2">//*[@Id='etsi-signed-2-28122004132954494']/etsi:QualifyingProperties/etsi:SignedProperties</xpf:XPath></dsig:Transform></dsig:Transforms><dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><dsig:DigestValue>yzrZoHN053SGPiwKtLOaw5x8I/8=</dsig:DigestValue></dsig:Reference></dsig:SignedInfo><dsig:SignatureValue>nezxeBrmZ8AsNvCF7NaOIxrWGLN8RgZawIX5kkfq+pObZVYI2N3jo3a4cWpK qXlN7YOmDNklg5PNICbDi+/LpLaCDst8XkloHw+dHcVpLcOmUt/zUa13OONP akQyxHLTCc4IeOcXFLuEKB+pOwY3r5ORaasXkXd9l6JuQQcL9dk=</dsig:SignatureValue><dsig:KeyInfo><dsig:X509Data> <dsig:X509Certificate>MIIE4DCCA8igAwIBAgICGEowDQYJKoZIhvcNAQEFBQAwgZcxCzAJBgNVBAYTAkFUMUgwRgYDVQQK Ez9BLVRydXN0IEdlcy4gZi4gU2ljaGVyaGVpdHNzeXN0ZW1lIGltIGVsZWt0 c58 ci4gRGF0ZW52ZXJr ZWhyIEdtYkgxHjAcBgNVBAsTFWEtc2lnbi1QcmVtaXVtLVNpZy0wMTEeMBwGA1UEAxMVYS1zaWdu LVByZW1pdW0tU2lnLTAxMB4XDTAzMDEyNzEwMTQxM1oXDTA2MDEyNzEwMTQxM1owZDELMAkGA1UE BhMCQVQxGTAXBgNVBAMTEEdyZWdvciBLYXJsaW5nZXIxEjAQBgNVBAQTCUthcmxpbmdlcjEPMA0G A1UEKhMGR3JlZ29yMRUwEwYDVQQFEww5MTM4OTU1NTI5MTEwgZ8wDQYJKoZIhvcNAQEBBQADgY0A MIGJAoGBANrnnGN6wiOyq/rskasBf/Tz4grEKI+NBAuDgO5aqObNDBAePISMQ2nFNX2nzoSNx7j7 esl4KdgySmJkZWs/nErpE5fB8lHOfrPRD61dodS+NhwiRWlm+I+ua+mOwR18fg/Cwt3YpXZihzZ+ ju7eFlxRifHtKJCLOld6IvdFdFCtAgMBAAGjggHqMIIB5jATBgNVHSMEDDAKgAhA1/OeG4c6zDA+ BggrBgEFBQcBAwEB/wQvMC0wCAYGBACORgEBMBUGBgQAjkYBAjALEwNFVVICAQACAQAwCgYIKwYB BQUHCwEwfQYIKwYBBQUHAQEEcTBvMEIGCCsGAQUFBzAChjZodHRwOi8vd3d3LmEtdHJ1c3QuYXQv Y2VydHMvYS1zaWduLVByZW1pdW0tU2lnLTAxYS5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly93d3cu YS10cnVzdC5hdDo4Mi9vY3NwME8GA1UdIARIMEYwRAYGKigAEQELMDowOAYIKwYBBQUHAgEWLGh0 dHA6Ly93d3cuYS10cnVzdC5hdC9kb2NzL2NwL2Etc2lnbi1QcmVtaXVtMGoGA1UdHwRjMGEwX6Bd oFuGWWxkYXA6Ly9sZGFwLmEtdHJ1c3QuYXQvb3U9YS1zaWduLVByZW1pdW0tU2lnLTAxLG89QS1U cnVzdCxjPUFUP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3Q/MBEGA1UdDgQKBAhOYExavdLCITAO BgNVHQ8BAf8EBAMCBsAwJQYDVR0RBB4wHIEaZ3JlZ29yLmthcmxpbmdlckBjaW8uZ3YuYXQwCQYD VR0TBAIwADANBgkqhkiG9w0BAQUFAAOCAQEAL+A2+Z5gQvn6SnZesLvVVVB1crHe7NI/Om2rEwha 4PfEk2pV9UdOg7C1XSzRu9jCNXIAuUSIpxTtAoJHsCk82S+iuEEgyVaXU/zFcbgT/k7opHXHswEC 6ab2SQnyOlugyG+o7e9nRwAQTzzjryICr3KACQcVwCpLKCgsU6gYQL1bi/c5vk4rnDYquSm1U34+ xIl77CefZN/peGU426vUzGma30wHBepLX5M+NXT7ILRzRk4i8oyOccIzOMi/iwAODJmgSSMcYjUg AngEoGYK9ngWu7Rr1gvy4lvOwpGGRpz2MP3nU9H2IfKk36n6hhVpc3EC6aF02RdIBD+x8VxVsA==</dsig:X509Certificate> </dsig:X509Data></dsig:KeyInfo><dsig:Object Id="etsi-signed-2-28122004132954494" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><etsi:QualifyingProperties Target="#signature-28122004132954494" xmlns:etsi="http://uri.etsi.org/01903/v1.1.1#"><etsi:SignedProperties Id="etsi-signed-28122004132954494"><etsi:SignedSignatureProperties><etsi:SigningTime>2004-12-28T13:29:54</etsi:SigningTime><etsi:SigningCertificate><etsi:Cert><etsi:CertDigest><etsi:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><etsi:DigestValue>wl/zuayZxKuYlH2G2FQCTcosSSg=</etsi:DigestValue></etsi:CertDigest><etsi:IssuerSerial><dsig:X509IssuerName>C=AT,O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH,OU=a-sign-Premium-Sig-01,CN=a-sign-Premium-Sig-01</dsig:X509IssuerName><dsig:X509SerialNumber>6218</dsig:X509SerialNumber></etsi:IssuerSerial></etsi:Cert></etsi:SigningCertificate><etsi:SignaturePolicyIdentifier><etsi:SignaturePolicyImplied/></etsi:SignaturePolicyIdentifier></etsi:SignedSignatureProperties><etsi:SignedDataObjectProperties><etsi:DataObjectFormat ObjectReference="#reference-0-28122004132954494"><etsi:MimeType>text/plain</etsi:MimeType></etsi:DataObjectFormat></etsi:SignedDataObjectProperties></etsi:SignedProperties></etsi:QualifyingProperties></dsig:Object><dsig:Object Id="signed-data-0-28122004132954494">Ich melde mich hiermit (28. 12. 2004 um 13:29:50 CET) zum Service XY an.</dsig:Object></dsig:Signature>0