p11-kit-0.23.22-150500.8.3.1<>,(e:;'p9|(UYJK,]ge,>1Š"7DJW0o_Rg5L6|0,"MyƮR.׽L>|=Ɩ_Ao 'A>ۑVWwDAM ]'l$XG/䊠qzNl׊o >90?9 d   D!BO e   @  P dH(?8H 9p :  F2LG2`H2I2X2Y2\3$]3d^4 b4c5ld5e5f5l5u6 v6Lw7x7y8<!z88889Cp11-kit0.23.22150500.8.3.1Library to work with PKCS#11 modulesp11-kit provides a way to load and enumerate PKCS#11 modules, as well as a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable.e:;'h01-ch3a9FSUSE Linux Enterprise 15SUSE LLC BSD-3-Clausehttps://www.suse.com/Development/Libraries/C and C++https://p11-glue.freedesktop.org/p11-kit.htmllinuxx86_64!YܸAAAAAAAA큤AAAAe:;e:;e:;e:;e:;e:;e:;e:;e:;e:;e:;e:;e:;e:;e:;e:;4db3c6fb3894cdf30eaed70c5b59e69e5690cd111434ad428a905f7b467396444c8892de22302f111df3accdc9b1390c23c8251bd3b4afebc512852213613a3ec9bcaa8b0366e2bef1e89fb6af4f084932d53c76da846100824015f89ff75b31../../sbin/update-ca-certificatesrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootp11-kit-0.23.22-150500.8.3.1.src.rpmp11-kitp11-kit(x86-64)@@@@@@@@@@@@@@@@@@@@@    ld-linux-x86-64.so.2()(64bit)ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.8)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libp11-kit.so.0()(64bit)libp11-kit.so.0(LIBP11_KIT_1.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3e7ca^@]Γ@ZX43@V@T9T;pmonreal@suse.comlnussel@suse.comscabrero@suse.delnussel@suse.delnussel@suse.dekukuk@suse.desbrabec@suse.commpluskal@suse.comp.drouand@gmail.comlnussel@suse.de- Ensure that programs using can be compiled with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705] * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch- Backport IBM specific mechanism and attributes (Jira#PED-584) 0001-Add-IBM-specific-mechanism-and-attributes.patch 0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch 0003-client-Allow-zero-part-length-at-C_SignUpdate.patch 0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch 0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch 0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch 0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch 0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch 0009-rpc-Handle-special-cases-for-buffer-and-length.patch 0010-Add-support-for-CKM_AES_CTR.patch 0011-Add-support-for-CKM_AES_GCM.patch 0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066): * Fix memory-safety issues that affect the RPC protocol (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered and fixed by David Cook * anchor: Prefer persistent format when storing anchor [PR#329] * common: Fix infloop in p11_path_build [PR#326, PR#327] * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325] * common: Check for a NULL locale before freeing it [PR#321] * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323, PR#330, PR#333, PR#334, PR#335, PR#338, PR#339] - Changes for version 0.23.21 * proxy: Do not assign duplicate slot IDs [PR#282] * common: Get program name based on executable path if possible [PR#307] * anchor: Exit with non-zero code, if any error occurs [PR#304] * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299, PR#305, PR#306, PR#309, PR#311] - Changes for version 0.23.20: * Revert "Fix RPC when length-s are 0" changes [PR#276] - Changes for version 0.23.19: * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255] * Add simple bash completion for provided commands [PR#258] * Unbreak list matching in enable-in and disable-in [PR#262] * Fix RPC when length-s are 0 [PR#259] * rpc: Add vsock transport support [PR#270] * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265] * Build fixes [PR#271, PR#272, PR#273, ...] - Changes for version 0.23.18: * rpc: Allow empty CK_DATE value [PR#253] * build: Meson fixes [PR#245] * build: Adjust feature parity between meson and autotools [PR#247] - Changes for version 0.23.17: * common: Fix uClibc-ng compilation [PR#237] * trust: do not allow daylight to invalidate date validation [PR#236] * build: Port to meson build system [PR#231, PR#234] * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232] * doc: Add 'server' command in help [PR#229] * Build and test fixes [PR#230] - Changes for version 0.23.16: * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225] * conf: Ignore user configuration if the program is running as root [PR#226] * proxy: Refresh slot list on every C_GetSlotList call [PR#224] * modules: Fix index used in call to p11_dict_remove() [PR#219] * Fix Win32 p11_dl_error crash [PR#218] * modules: check gl.modules before iterates on it when freeing [PR#217] * trust: Ignore unreadable content in anchors [PR#215] * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213] - Changes for version 0.23.15: * trust: Improve error handling if backed trust file is corrupted [PR#206] * url: Prefer upper-case letters in hex characters when encoding [PR#193] * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202] * virtual: Prefer fixed closures to libffi closures [PR#196] * Fix issues spotted by coverity and cppcheck [PR#194, PR#204] * Build and test fixes [PR#164, PR#191, PR#199, PR#201] - Changes for version 0.23.14: * proxy: Avoid invalid memory access when unloading proxy module [PR#180] * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181] * build: Restore libpthread dependency [PR#183] * Build fixes [PR#188] - Changes for version 0.23.13: * server: Enable socket activation through systemd [PR#173] * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules [PR#174] * proxy: Fail early if there is no slot mapping [PR#175] * Remove hard dependency on libpthread [PR#177] * Build fixes [PR#170, PR#176] - Changes for version 0.23.12 * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160] * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167] * Build and test fixes on macOS [PR#162, PR#168] - Changes for version 0.23.11 * trust: Add extractor for edk2/cacerts.bin [PR#139] * modules: Add option to control module visibility from proxy [PR#140] * trust: Prevent trust module being loaded by proxy module [PR#142] * library: Use dedicated locale object for printing error [PR#148] * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134] * Improve const correctness for P11KitUri [PR#152] * PKCS#11 URI scheme comparison is now case insensitive [PR#156] * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135] - Changes for version 0.23.10 * filter: Respect "write-protected" vendor-specific attribute in PKCS#11 URI [PR#129] * server: Improve shell integration and documentation [PR#107, PR#108] * proxy: Reuse existing slot ID mapping in after fork() [PR#120] * trust: Forcibly mark "Default Trust" read-only [PR#123] * New function p11_kit_override_system_files() which can be used for testing [PR#110] * trust: Filter out duplicate extensions [PR#69] * Update translations [PR#128] * Bug fixes [PR#125, PR#126] - Changes for version 0.23.9 * Fix p11-kit server regressions [PR#103, PR#104] * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99] * Build fixes related to reallocarray [PR#96, PR#98, PR#100] - Changes for version 0.23.8 * Improve vendor query attributes handling in PKCS#11 URI [PR#92] * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91] * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user configurations [PR#87] * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86] - Changes for version 0.23.7 * Fix memory issues with "p11-kit server" [PR#78] * Build fixes [PR#77 ...] - Changes for version 0.23.6 * Port "p11-kit server" to Windows and portability fixes of the RPC protocol [PR#67, PR#72, PR#74] * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71] * Build fixes [PR#63 ...] - Changes for version 0.23.5 * Fix license notice of common/unix-peer.c [PR#58] * Remove systemd unit files for now [PR#60] * Build fixes for FreeBSD [PR#56] - Changes for version 0.23.4 * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31, PR#37, PR#52] * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY attribute, used by Firefox [#99453, PR#46] * Add 'trust dump' command to dump all PKCS#11 objects in the persistence format [PR#44] * New experimental 'p11-kit server' command that allows PKCS#11 forwarding through a Unix domain socket. A client-side module p11-kit-client.so is also provided [PR#15] * Add systemd unit files for exporting the proxy module through a Unix domain socket [PR#35] * New P11KitIter API to iterate over slots, tokens, and modules in addition to objects [PR#28] * libffi dependency is now optional [PR#9] * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45] - Changes for version 0.23.3 * Install private executables in libexecdir [fdo#98817] * Fix link error of proxy module on macOS [fdo#98022] * Use new PKCS#11 URI specification for URIs [fdo#97245] * Support x-init-reserved argument of C_Initialize() in remote modules [fdo#80519] * Incorporate changes from PKCS#11 2.40 specification * Bump libtool library version * Documentation fixes * Build fixes [fdo#87192 ...] - Move RPM macros to %_rpmmacrodir. - New server subpackage - Change keyring to new maintainer Daiki Ueno - Avoid bareword to fix build failure - Remove obsolete patches: * p11-kit-biarch.patch * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch- Also build documentation (boo#1013125)- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox detects built in certificates (boo#1154871, 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch, 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)- Use %license instead of %doc [bsc#1082318]- 32-bit compatibility fixes: * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39) * Add p11-kit-nss-trust-32bit NSS module * Fix potential bi-arch issue with private binaries (fdo#98817, p11-kit-biarch.patch)- Update to 0.23.2 * Fix forking issues with libffi * Fix various crashes in corner cases * Updated translations * Build fixes - Make building more verbose - Enable tests - Small spec file cleanup with spec-cleaner- Update to version 0.23.1 (stable) * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582] * Add pem-directory-hash extract format * Build fixes - Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff; fixed on upstream release - Remove autoconf, automake and libtool require; unneeded dependencies - Add gtk-doc require; needed to build html documentation - Remove redundant %clean section- remove patches: * trust-Print-label-of-certificate-when-complaining-.patch * trust-Dont-use-invalid-public-keys-for-looking-up-.patch - new version 0.20.7 (stable) * New public pkcs11x.h header containing extensions [fdo#83495] * Export necessary defines to lookup attached extensions [fdo#83495] * Build fixes - new version 0.20.6 (stable) * Make the p11-kit-proxy.so module respect critical = no [fdo#83651] * Build fix for FreeBSD [fdo#75674] - new version 0.20.5 (stable) * Don't use invalid keys for looking up stapled extensions [fdo#82328] * Better error messages when invalid certificate extensions * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files * Fix some leaks, and memory issues * Silence some clang scanner warnings - new version 0.20.4 (stable) * Don't complain about C_Finalize after a fork * Fix typoh01-ch3a 1698315047 0.23.22-150500.8.3.10.23.22-150500.8.3.1  pkitrustanchorsblacklistp11-kitp11-kit-extract-trustp11-kit-remotepkcs11p11-kit-trust.sop11-kitmodulesp11-kit-trust.modulepkitrustanchorsblacklist/etc//etc/pki//etc/pki/trust//usr/lib//usr/lib/p11-kit//usr/lib64//usr/lib64/pkcs11//usr/share//usr/share/p11-kit//usr/share/p11-kit/modules//usr/share/pki//usr/share/pki/trust/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31290/SUSE_SLE-15-SP5_Update/d2461017bafa557a22e90431a0c28c1a-p11-kit.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=9926c4d8a0749d12aeb0448b98530adca576b985, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9ca801c31d725bedbe7d4630b6c76997d392a2f3, strippedASCII textRRRRR RRR R RRR RRRRRRRR RR RRR RR RRR RRRԥi{X>utf-8e47edcc1c9ea634eb4e1ea8a8fab0322c33809870e1cd482ff8d21418aa00844? 7zXZ !t/bC]"k%{]Z oX8VTIre@"VMbkQ2%(vX la=a2(7D W2,Ps7G"릱P'[@=Zl26iCcG)_&=&%~"b},OeSP3b{HBu1#:ckz! i>JnLh7so} ~$:p@d[#OCGr3C0`Gq¯%ozT=y%&]5 +p敀Ѳ2fD ν7w׫Z=I{R?E8\LBz]BvAPm*{cD_CAlTc[ßrINw;7%9Hgyh G6' #i[*:c3ZwN3cdrjC?8AN`R/Tp5LT}BQ{ (~7v_.>At`i(hjAUF]yRxʻQ"{3wwA!Hud6 Sɇv $΍N-gQ:Go*2vr8԰ԙ._F%kZFf۬5U"Mp^Z5@Љ,R1&_,#+(7SRHHT &w} 7gIFvA4"u"e{~6Ofm <ɚQkOҎ4y_L?|Bb_HozHtJۼ Es7&@xs4lw0Ci7\jZ-pY3p yG7֕]QPN˝LDT@@dRP9;.ɏrf$),3O7L֞1>{[wg6KtINx"bt;Tʛ~ %2f1 Q %a23Y','O]$2!RBbאAbݚּ@0$+I!>K迂<6C6C_[Mrlmgs_=_*\l+lYA(V9ٰ4н_r|in2х"D 0bʹO?݊Kmv;ό7wOyR; \<9< P x*G{C?;Ki,«ψ"Jv6gKF?.L|2"6?ד ̎sP`(x4/a 7 =U~eE &Ԟ OMT"rJ&-ɢnton. L)uV{CQtȞ)Rw},/2Hy_pE[(ӵj/mX{a{Y 5CCTlWljziI}CLϋN z6TDKJl(&j#vWj =F{ФX 5#hlBi@oaDvaXT"k{05Axo0lr+&.1VV̷#M9 L{9s:S~)rZI%U~U`弢 S(n,rF-fF`kYnfBDj?̯Sj!8{LTiDA0wd6^8('k!U:DwAڴ[SV6;q*LZ;שi阤ZN SqPZ_tm S )+zKrQ&l/-F)4h8ğǥMs$-ٱk7˴'h1jzm?=v/P;aY_]7،HLÀf_+Ys{oI:?6iS ?LXwasKN:UlCrco)V Q7!f5J*U7GR߁涒ez_>#\`)1dOIpE?ęxt0{yYHJ1],|:z 3)rMMk#*pɻs;%^~x4GU"r $˛5~VV[8gVP Tʛ=xՕ t*kOʴ쁖%2׮:8Yeemgz  nB=9~ ?D> $X\\JycŶw-QKyZuL oeE{02*G?gId*&o^s9ɇ"%4Fi9g,ؚhofaLlbTmP_!X8 }G=E\e{Ҹf9q澴!S5O ՐL|0(i$Jt ? ]bvmllS+lP0grjoFro2' h2l֠dIfoZ{vc{؏׋e31kJ/nnNDu<7u:. 6LsJzp)b޻[+yf*=R֧MūX8m<>\aTXW-Wuwٱ\3.z/xPI^{]ǢLj)H-^dx (rv*H,_/)-מ(V"o@I=c)E"bnBJ/>]tɁZ ccGOi>iNcpz<.}[;jh<s,~r$f35qaVLK^6Wɤ&Vʝ7aLj8頃@}'6Ө~-Lsh{r y[/Ay8C[G Ji"'#P}XL)^z8Z8~?A}|]U."ܸo\Hˬ!_.0(qβ,B`"kq羯kqhGp bfC4dۭBkLJZI"R1ؐ0dڌ 1J57Gz.!?Xn޾oAE~j(<8ebMVd.&ѯ(S?4-]mYA҇Z\XK3EϦN.LY|6Z hWf^IYFjeB@ vjsy[bAY Gqavh}/J hL`:cKBlU"< *DF*%IFZS5i?=6JmԖ5׋ٮ0OoX\_ӏגy Z<~9a%_‰#OKYt@HB ZHƔuj{5{늱YKoΉ}ؽ' QϦ:w&3%(~} n0]uՠ̓kTR_uei" Dh~!VmPLɚ['/K'=MT̴p,?{.blu 0k\tCk\x_rNUɂԵ,hU1lg]lУ4C;HK-P2e8VfӼ/lՖ։KA:n]| d-3e_^Ȥy&3Xr~Nn'"Bɑ]F [ bmEtw|?ebц?!=WiY5:²V*уy&l=x)~m+~ǀ ]JɳV =e |kv{cx?~F O1ylצjl| tV\`P=J-v.|R Go9a6gC9B.t (7 "wDo]$8 7Kƌ8x޾1\!3,4[d#F] hHS-o6[<; B1- L[$i"]طEZ ̥Rg\m%5}&|#^L ؝@ePM, AF7[ X j8`>a#ɬLe.3y4-ޫ Xx|S:aV̨wmv<-dЏ)u#IhHf XKFQYjφSg̝J,u@lc"Wy&!%I/FT}ٲuiIo9\!pUleb_49v; 5Gy15`!ڙwMgho OHSh+G.S\ UPr~$&Fc^w~?v x׵4L+qb.v\6 ^tB0g+yh^a5녤j?}P,jOWgv@:; i|C;h)6jE+0{"$q`jH]\#N!e|Ehii󥛽MQ~אi&yΎ`XL^:dyaPTYDv**Ƙ `#JZr'uYg[PBL [N uD -x6G(6}x^CmLT7˃uY(3u%b&S=~ώִP4r\Lz0A'}'=ƑƱmGr,^]|Mޫ-t1$Q-.dXeو49%=쑁񠏸{۹9a@lIe wdZqPV-/Ac'ȚFQB:]6T,C oodթ䷈lԸ~}|-s_7?'`޿+}mGiKޯV>!(,؜q.?u2?sU\qYP6$\FMWUI@V`쉰*0"چp*810ˑ<ְ?pKE9CTXsuU;^`s fY.X2Kin UX_a.#~ڪ,c9GYNg4x<̄7]s%0۠{\x2f?]i%ngghF(Th-`ҷbg@jHH\*Iiv|RWWdfxy601W, +{$8U` $^ ӂxRΫ75 $m-Ú(O*4Xˋ@әUNsy*RO=[JZ|1e+hW{KqQ\K/C̀m]#/4d~,&.*Z*s~{r.|?_]>m-5@ķ4֠q_#c <^'9@퐞f!hB ?5WI8qiuÓݖ@0D|p Mz 'Z,^&w&òR@c"%tod|+y5q݊vN{>߉NB`MOy哞[oxL4dufĬbHʊ',wpYDv꾳&!la$g6'0JA3?uk L~3IITJg11#]0!?ʧ\ #ϳ7jœ H<-4e Vz&(LH\T|rdy Ms~/ZٚXٙM21A HlKR 1BdK'ǻrOƌAPM=a\EFcYȠcЕ[]'XrR0"f+* `w^:@\9j}/mwZi5 0&931Srݓ7V v4w̳6s0w/u4unh?zzFvF5R[c*9Z4e>N 0)1¶WH:훝GW14?֍\o 3z0dNR@^ ƙ(E;o:7 d(nU1%_yDz䕩=ZcoRnMep1o!A,ύ;d eW+InpagtHTmʖ"HXJAs$g|Km5W0yHl2A ]^nx=Dowm.f+oB+g+ /2;Md tUE'eRWU1hq"_TIhÔ`w5rWV4U=X`KHhrDYU+g / #O! zxk ;<%Z?8yt0HDg_RZ /vc2wsTS$H}@UC3zf4!]M .ړk|gz7#!2M\r RF(f)u^'B{u:՛VͺeZ\TK2|cN BmsIwLTJp|pCC$"8}'\nsdJAe9aKވW 6RҲ#4&tźǂAd'XVtt]lN[M#r!2 *|`G}Eo{"*'G62wt^ȌO$] ^%2P=b%651[yNq7SO\6+;SH=cDtќL;Y ]qzr^^7foc:-MwVi5=*;JP,-;6l%#bA41`7:/@]lWvJ^HS%6TpɊ_ g@nF֚Qe&/)1|C;f/J'yV;;Ma/{(P\! W0%>z^t9%Ə ڞ yC=O~T-5ҟ?rit$3P|1 %F7-(<(c,.E ;KB? >vHZKOGA&FuMdn۲Mp?t|*d(}O>[&, : \h&ng9)tnn,JH24!%ÂhÌ)b𵑺:NB@P{wIiCd4,s t,&9MjYݙvOFIq'N՛f\o=r6Uլ 9]0_s驌Ғn,.^m/).ܤnJ%zkK0` ˢQĎ_Oa TXE2 UC=0Ca\@d%t Mqذ(8sk RCe%uИd' Mbx*~ s8MPdq{/(]C,Im<n212m^j@d}={ bv)Aifu5Da͕2h5*dJoo.%{0]ꗍ{3b|Ǭ2;;`gD ?o`#:2'Bb}L"^sԷt3C{%rr9 @wFQ`ijTTG$ n@3"JG{ ;mH7oʤœJz&%l♢,2. RU8DFMN s /-% ͚RTW3w=!ZDyMΰp0[H%.)\̓n}9+M\4h[*+!9~ :^lT5}&Oҕ,VEƛԶaYO6#͸2p/Y߽w#f9:fƚy!dDfbVPc0a}w:3 !fnnkN{"U`_g'rWWI')!t+.f9ҸZ%'Õkܳ3e#ܶ5+r%vQk{?{G]%7\3sxH%z7yJ(*ڌ?FTCNd 1f9vZ&Jr>opTr5^W6 Pp%QY1g^G'FNM? Tc+kRejNZ@$䐃`|82dP߉ qQkGct]R]&r^.2{+gL^ gEp_b,Q(^F^ R;aZN! Y RoF zG +^wx'p*m ~g'HfK{ݖCNo H dTۙ) HXË=n7R3vm5 jlpa5*J~98Z ڡ_# j,clwɱpG.ú-9Hb\%d w f ʙh%HB9ԿBb7'C7[K}fm/D4I0N4=,x乇be+}g ;Qs? pٸvl\Uq6㙣ʶ9ZLO4]&,1pp"2VGOKGEHW!JOtv#:&& ee␴dJez?˟n۝^z1݉q0QL#!ѕ<և=p.qtg1UA4""d`Ի~o ~2SXKu%Op6Ո3Lo߄aby4E=|sv0bQXg8fdz=3WB6lyزp#My2(K<_hwe?T:~t,z c>} 3_/[z[+!ZWj/np(M \7v9#ZNfo2jgه.zKrBujW1E0^\#$zX_8 dS)ot!Cٿ?gV̲D D5 .5bQ'8cHu` UTJ) )%RgPO(b>+#0HAh S1jXEOIO[nEOA^4#J-%Y aImKG>dLMq-+Fþ'LNuFq&m8~.)(ԟ]f_5EY!t0H=tUNm㟳KA2=d}9~W+W ȹ(_-mY/zBce?J=}~Ye83r!$ ʩ\τuef 2H('yh6MLc#– =ىMq\= Q>u8ezw\tГ[ڂ  ԎtC޼!ZYm~% oƨ= UOd#Q[68`RdD'g#9f@j;N = :weܞ~ʭ|+I, BIUVu{^WOfV^v{2轣"P:&Ι[EwQ@c$9'^j8"q ]eeZP[@HvZq)w,R}rlM2vnds^_A/2-." n̊5$nQ8Lt.0JꗏmCT;XYxHe>a oH;R}6F@<S{Sf往!ߐ+k\M l9óC-:LSXrxԏCj"fom\v>ʩWU]w폏Ŏݴd2{s`lnS+tàN#*x䠣A:G0ѽA}L8SPj3o|xEr?.0˕ UO5 ׸^/|8n*Ǹ%`N Ǟ:f(VԫR.&~-wyWY3ST4ҟFƖ0DMUnut)pP]zV\wg6S/Ext& /'ZOk(l }dg0(@xa^Yb81igeVj wld*n> R[EMl񈹨wUg I%jxǫUÿ5PZA d7KyL9T@y4(ׄ6*IDž8= =:x8djkҙ]6Rr !P;oEؿ,6 +''/|`S85 Aij hɮ!J'tm^ @ l6eڮK}!#}!*^rm9i&K*gbū+(3a1:fdYTDQڄծ\_o;tePRWgsBg笩a)9z^, <}m㳍Lp@5Q2ʳbj aMs1!:!)KHD%A R+eyVٻpE;Y@U&Cg6rd[@uGKf+\j{p!} bITYR5:km+Z )4A>񺂍oϝkƼ+դ&s-ؠNPAk t)`bINXQLO3JUHj\+8fq^lDffAba\ vYfOU>E\auH= lTHnavGeQ8wTQGBg,Xw*C7~TV󭋻=zʌŦCd#\O%E=Fj $FX("{;sh(8|h(79tz-MG~ WMoɥo* يK ـ`}Xu62Ƨ67RnlvfLY-SJ83O٧u=P%1}xh>q_U2g r]JM"zI^e8KMfH\yb#ObxTF ]ƢaU&*f j\(V>RX`瑥ԞҬQ=n%#[e[y],ʃGfE(Y/VrS#>M?bvwL:]E=ӢL?.^9V0Dey&mSr8x+>pDO%QRy?TQeqW hvRN:/툮(^X0;SIA/j*qӰ vi pծ b -SBwcC? u,hsxZ VC\Ѫ