p11-kit-0.23.22-150500.8.3.1<>,ue:;p9|Hͤv][! xk 6=nbRuE),IIwrֶ#/"%2;$V;/ZgQ3zjD4RU JqŤ5O7qlw?(a ڏ|{f8uGNXmZ^U^64#Iȿ_o_ RW۩TO:b$B8|ֆ1RA/R$*l 0y5 ;Xdn0ajd*H>>7?7d   D!BO e $ D  T h,(8$ 9L : F1(G1@H1I1X1Y1\2]2D^2 b3c4Ld4e4f4l4u4v5,w6x6y7<z77777Cp11-kit0.23.22150500.8.3.1Library to work with PKCS#11 modulesp11-kit provides a way to load and enumerate PKCS#11 modules, as well as a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable.e:;mourvedre>SUSE Linux Enterprise 15SUSE LLC BSD-3-Clausehttps://www.suse.com/Development/Libraries/C and C++https://p11-glue.freedesktop.org/p11-kit.htmllinuxppc64le!X `AAAAAAAA큤AAAAe:;je:;je:;je:;je:;je:;je:;je:;ke:;je:;ie:;ie:;ie:;je:;je:;je:;jfc660957548dedbe7627db508c8c3c8ad343eb767c917e7c082ef0b6f9c2f96a77dde5bd99bd68dd964d92c5bc55f6c4b6333338ac5c2b6d8fc215c53f93d69ac9bcaa8b0366e2bef1e89fb6af4f084932d53c76da846100824015f89ff75b31../../sbin/update-ca-certificatesrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootp11-kit-0.23.22-150500.8.3.1.src.rpmp11-kitp11-kit(ppc-64)@@@@@@@@@@@@@    ld64.so.2()(64bit)ld64.so.2(GLIBC_2.22)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.26)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libp11-kit.so.0()(64bit)libp11-kit.so.0(LIBP11_KIT_1.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3e7ca^@]Γ@ZX43@V@T9T;pmonreal@suse.comlnussel@suse.comscabrero@suse.delnussel@suse.delnussel@suse.dekukuk@suse.desbrabec@suse.commpluskal@suse.comp.drouand@gmail.comlnussel@suse.de- Ensure that programs using can be compiled with CRYPTOKI_GNU. Fixes GnuTLS builds. [jsc#PED-6705] * Add p11-kit-pkcs11-gnu-Enable-testing-with-p11-kit-pkcs11x.h.patch- Backport IBM specific mechanism and attributes (Jira#PED-584) 0001-Add-IBM-specific-mechanism-and-attributes.patch 0002-Add-support-for-serializing-CK_ECDH1_DERIVE_PARAMS-m.patch 0003-client-Allow-zero-part-length-at-C_SignUpdate.patch 0004-Fix-support-of-CKA_DERIVE_TEMPLATE.patch 0005-Add-other-SHA-variants-also-for-RSA-and-EC-signature.patch 0006-Add-support-for-missing-AES-and-DES-DES3-mechanisms.patch 0007-Add-support-for-MAC-and-HMAC-general-mechanisms.patch 0008-Add-support-for-CKM_DH_PKCS_DERIVE.patch 0009-rpc-Handle-special-cases-for-buffer-and-length.patch 0010-Add-support-for-CKM_AES_CTR.patch 0011-Add-support-for-CKM_AES_GCM.patch 0012-common-pkcs11x.h-Support-CRYPTOKI_GNU-for-IBM-vendor.patch- Update to version 0.23.22 (bsc#1180064, bsc#1180065, bsc#1180066): * Fix memory-safety issues that affect the RPC protocol (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363), discovered and fixed by David Cook * anchor: Prefer persistent format when storing anchor [PR#329] * common: Fix infloop in p11_path_build [PR#326, PR#327] * proxy: C_CloseAllSessions: Make sure that calloc args are non-zero [PR#325] * common: Check for a NULL locale before freeing it [PR#321] * Build and test fixes [PR#313, PR#315, PR#317, PR#318, PR#319, PR#323, PR#330, PR#333, PR#334, PR#335, PR#338, PR#339] - Changes for version 0.23.21 * proxy: Do not assign duplicate slot IDs [PR#282] * common: Get program name based on executable path if possible [PR#307] * anchor: Exit with non-zero code, if any error occurs [PR#304] * Build and test fixes [PR#283, PR#290, PR#291, PR#292, PR#296, PR#299, PR#305, PR#306, PR#309, PR#311] - Changes for version 0.23.20: * Revert "Fix RPC when length-s are 0" changes [PR#276] - Changes for version 0.23.19: * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255] * Add simple bash completion for provided commands [PR#258] * Unbreak list matching in enable-in and disable-in [PR#262] * Fix RPC when length-s are 0 [PR#259] * rpc: Add vsock transport support [PR#270] * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265] * Build fixes [PR#271, PR#272, PR#273, ...] - Changes for version 0.23.18: * rpc: Allow empty CK_DATE value [PR#253] * build: Meson fixes [PR#245] * build: Adjust feature parity between meson and autotools [PR#247] - Changes for version 0.23.17: * common: Fix uClibc-ng compilation [PR#237] * trust: do not allow daylight to invalidate date validation [PR#236] * build: Port to meson build system [PR#231, PR#234] * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232] * doc: Add 'server' command in help [PR#229] * Build and test fixes [PR#230] - Changes for version 0.23.16: * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225] * conf: Ignore user configuration if the program is running as root [PR#226] * proxy: Refresh slot list on every C_GetSlotList call [PR#224] * modules: Fix index used in call to p11_dict_remove() [PR#219] * Fix Win32 p11_dl_error crash [PR#218] * modules: check gl.modules before iterates on it when freeing [PR#217] * trust: Ignore unreadable content in anchors [PR#215] * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213] - Changes for version 0.23.15: * trust: Improve error handling if backed trust file is corrupted [PR#206] * url: Prefer upper-case letters in hex characters when encoding [PR#193] * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202] * virtual: Prefer fixed closures to libffi closures [PR#196] * Fix issues spotted by coverity and cppcheck [PR#194, PR#204] * Build and test fixes [PR#164, PR#191, PR#199, PR#201] - Changes for version 0.23.14: * proxy: Avoid invalid memory access when unloading proxy module [PR#180] * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181] * build: Restore libpthread dependency [PR#183] * Build fixes [PR#188] - Changes for version 0.23.13: * server: Enable socket activation through systemd [PR#173] * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules [PR#174] * proxy: Fail early if there is no slot mapping [PR#175] * Remove hard dependency on libpthread [PR#177] * Build fixes [PR#170, PR#176] - Changes for version 0.23.12 * Fix compile error when PKCS#11 GNU calling convention is enabled [PR#160] * Fix getauxval() and secure_getenv() emulation on macOS and FreeBSD [PR#167] * Build and test fixes on macOS [PR#162, PR#168] - Changes for version 0.23.11 * trust: Add extractor for edk2/cacerts.bin [PR#139] * modules: Add option to control module visibility from proxy [PR#140] * trust: Prevent trust module being loaded by proxy module [PR#142] * library: Use dedicated locale object for printing error [PR#148] * Treat CKR_CRYPTOKI_ALREADY_INITIALIZED correctly [PR#134] * Improve const correctness for P11KitUri [PR#152] * PKCS#11 URI scheme comparison is now case insensitive [PR#156] * Build and test fixes [PR#151, PR#149, PR#141, PR#138, PR#135] - Changes for version 0.23.10 * filter: Respect "write-protected" vendor-specific attribute in PKCS#11 URI [PR#129] * server: Improve shell integration and documentation [PR#107, PR#108] * proxy: Reuse existing slot ID mapping in after fork() [PR#120] * trust: Forcibly mark "Default Trust" read-only [PR#123] * New function p11_kit_override_system_files() which can be used for testing [PR#110] * trust: Filter out duplicate extensions [PR#69] * Update translations [PR#128] * Bug fixes [PR#125, PR#126] - Changes for version 0.23.9 * Fix p11-kit server regressions [PR#103, PR#104] * trust: Respect anyExtendedKeyUsage in CA certificates [PR#99] * Build fixes related to reallocarray [PR#96, PR#98, PR#100] - Changes for version 0.23.8 * Improve vendor query attributes handling in PKCS#11 URI [PR#92] * Add OTP and GOST mechanisms to pkcs11.h [PR#90, PR#91] * New envvar P11_KIT_NO_USER_CONFIG to stop looking at user configurations [PR#87] * Build fixes for Solaris and 32-bit big-endian platforms [PR#81, PR#86] - Changes for version 0.23.7 * Fix memory issues with "p11-kit server" [PR#78] * Build fixes [PR#77 ...] - Changes for version 0.23.6 * Port "p11-kit server" to Windows and portability fixes of the RPC protocol [PR#67, PR#72, PR#74] * Recover the old behavior of "trust anchor --remove" [PR#70, PR#71] * Build fixes [PR#63 ...] - Changes for version 0.23.5 * Fix license notice of common/unix-peer.c [PR#58] * Remove systemd unit files for now [PR#60] * Build fixes for FreeBSD [PR#56] - Changes for version 0.23.4 * Recognize query attributes defined in PKCS#11 URI (RFC7512) [PR#31, PR#37, PR#52] * The trust policy module now recognizes CKA_NSS_MOZILLA_CA_POLICY attribute, used by Firefox [#99453, PR#46] * Add 'trust dump' command to dump all PKCS#11 objects in the persistence format [PR#44] * New experimental 'p11-kit server' command that allows PKCS#11 forwarding through a Unix domain socket. A client-side module p11-kit-client.so is also provided [PR#15] * Add systemd unit files for exporting the proxy module through a Unix domain socket [PR#35] * New P11KitIter API to iterate over slots, tokens, and modules in addition to objects [PR#28] * libffi dependency is now optional [PR#9] * Build fixes for FreeBSD, macOS, and Windows [PR#32, PR#39, PR#45] - Changes for version 0.23.3 * Install private executables in libexecdir [fdo#98817] * Fix link error of proxy module on macOS [fdo#98022] * Use new PKCS#11 URI specification for URIs [fdo#97245] * Support x-init-reserved argument of C_Initialize() in remote modules [fdo#80519] * Incorporate changes from PKCS#11 2.40 specification * Bump libtool library version * Documentation fixes * Build fixes [fdo#87192 ...] - Move RPM macros to %_rpmmacrodir. - New server subpackage - Change keyring to new maintainer Daiki Ueno - Avoid bareword to fix build failure - Remove obsolete patches: * p11-kit-biarch.patch * 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch * 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch- Also build documentation (boo#1013125)- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox detects built in certificates (boo#1154871, 0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch, 0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)- Use %license instead of %doc [bsc#1082318]- 32-bit compatibility fixes: * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39) * Add p11-kit-nss-trust-32bit NSS module * Fix potential bi-arch issue with private binaries (fdo#98817, p11-kit-biarch.patch)- Update to 0.23.2 * Fix forking issues with libffi * Fix various crashes in corner cases * Updated translations * Build fixes - Make building more verbose - Enable tests - Small spec file cleanup with spec-cleaner- Update to version 0.23.1 (stable) * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582] * Add pem-directory-hash extract format * Build fixes - Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff; fixed on upstream release - Remove autoconf, automake and libtool require; unneeded dependencies - Add gtk-doc require; needed to build html documentation - Remove redundant %clean section- remove patches: * trust-Print-label-of-certificate-when-complaining-.patch * trust-Dont-use-invalid-public-keys-for-looking-up-.patch - new version 0.20.7 (stable) * New public pkcs11x.h header containing extensions [fdo#83495] * Export necessary defines to lookup attached extensions [fdo#83495] * Build fixes - new version 0.20.6 (stable) * Make the p11-kit-proxy.so module respect critical = no [fdo#83651] * Build fix for FreeBSD [fdo#75674] - new version 0.20.5 (stable) * Don't use invalid keys for looking up stapled extensions [fdo#82328] * Better error messages when invalid certificate extensions * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files * Fix some leaks, and memory issues * Silence some clang scanner warnings - new version 0.20.4 (stable) * Don't complain about C_Finalize after a fork * Fix typomourvedre 1698315209 0.23.22-150500.8.3.10.23.22-150500.8.3.1  pkitrustanchorsblacklistp11-kitp11-kit-extract-trustp11-kit-remotepkcs11p11-kit-trust.sop11-kitmodulesp11-kit-trust.modulepkitrustanchorsblacklist/etc//etc/pki//etc/pki/trust//usr/lib//usr/lib/p11-kit//usr/lib64//usr/lib64/pkcs11//usr/share//usr/share/p11-kit//usr/share/p11-kit/modules//usr/share/pki//usr/share/pki/trust/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31290/SUSE_SLE-15-SP5_Update/d2461017bafa557a22e90431a0c28c1a-p11-kit.SUSE_SLE-15-SP5_Updatedrpmxz5ppc64le-suse-linuxdirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=ce37883e0b096629421156570b21de10c4b4dc45, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=02513f822ec90ddeae53a399b80ae22177cd864f, strippedASCII text R RRRRRR RRR RR RRR RR RR0d9ږ+utf-886dc2342f37bb3443e532e05a9c9f2fb5d4c830fc7783ef946074d80f986214e? 7zXZ !t/QL9r]"k%{]Z oX8VTIre@"VMbz:h, NExlOPz%hF~AϬCC<ԩ M1L@|kKF&cۨTz{BpЈa3z2KRw[Q ˕+*<uf3B.#BXfd!/YOs!`x$GE0;&Y*g_-}*i(#H;_*JRWŲEXkw9i 'K}3M'J,HrCC*멨e φkG  2ե<E~mv;@.=9nu]6KMyNi2jZ䝊 hV{"EBk~_Htz-1e oO/"4?\fVj^@A$Ěm Jq9m -TӁC-`Zʹ4$S1zmi- 'U^Hw*OnN]#ESm;y-F鴒a& l7%T%bqcԪ^4?Gi/lDrw4!P{މ|j҃9q]j:Io(=cm*"%oR$ Hi nSp| hRX8MgPe= όDjg$O, qP#:˨7?Gp]/ \r{D%>8#S/A7E{y>~F7es䭃)M<^J0m&7hh4yn*h38uN[Í1j *A~9eJr݅xE:f)ľ_?n| KuΧcK-#tcƨ忝kf# Tm ]N!7US[D}!`ͱ~O*TP8ԓw:Jfg5O(hSoSIe*AtvxS+וI,GvoIr5rKžk ~[S9;(S!&PB6&QNwkYQXyo\6UӳfGd%%jZJٽG뿿jɎzͻdQjTggٺÚʘFj?u$VW2nJfchS{U/KjKde2~8tiM:$f4q-",E4kL'g"3\ЄPMD6⬲G#N?_70GځCf2g(@ʤ2Z@ܧDz +ǹY(8]s-՚8.rEjл'GµsS_q9םb_Qn2U[J!]uk}{aluA8$ҝW%np1- 7X^!ofOַݬ)埱;ӕh_67/,@B13[kC k +Q 9ʊBн#EҦx\"<$ǶBd)>PfU Zmu07`Xƶ J<-Q+wΠRƭՀJE{ d [M^&O]p?Xa u03Nx١}@>3comt0Ń& C@B+)|.X8=1Ń ʳ m˱_]!fV tڹF#ƓΡo?Dx34,t߼QLEX&ʚe,כ5dï^;y U饬Pqx}`]풣 \/Z͚ṂyK#fLdخl%J(n`[xU$,XSsR/Z[JiQ =0G VQΪG1 .nٛWg!ylXSR.AB:mLVVr *.JLX =UϾfNpڹmf!Ε:ByjQ'Fږ\OvȰ7d0S|+5!Tv^?^(۷ߟ,n:6m[ 6Cik}H/?~6Ͼ$drCt@A>EI,(8n!Ϋ)&g_4b)n$`Ei|YGU?(X>XtqbPD̄~F.|JξT@ ]A9 <'H8x|6t\HpɉB-Oe%NI)zlalk_;xIOV7rlzC@MS&ĸ4V yY/K$ 3.OZ>9SІ6i/ՀiKQ0TQX+z7 q$'X|uB&X5,)A qI(#b-1Shb-/%'=.0wmN~tW(-+K,˯(բm>cpK[qd3g AXҹN CNrlKs#| IGby7d"HlZ1q@I܁sհJgxÂσOȏl?:x45}^oO"`̞>vڕ+@yGjO:rs_:m`έ3{k<lNg}hc@A ᢷ5G[Rb',lQuho gFZ7{\p̋!nޜ7jHRIv`d tS IJbyPָ֘ +8nUQjg's90Tg YRU|Ϗn]jZMytj&]?B_zBe L׈F'*/hŌ"X|P+gb4zc^c'Q&.ɻ]Z[$?Wޙi15ePmq6<Նͺ]hڍRV0ˬ-Ga/S U='LjUD5˃s`Ь=` czS'Zv;uXN k(dq+T7ǀᚋ:ָ~DUŎS[^-SMWŚ\ZVo%֋BNM>3ٞB,|q7zboT=B-xr`Ѭ=\e )pMw֒0 Ա~6,H OAZ [4-I?`hQ,+[EPzXεf<Ƃ}[?KxFG@3kҤXj21J H!Ja4b\n c`-mڬl4Tk0RYl+kA9FڥR b-ר[I紤ZR}Z6eDoGbI=Pvrdk(,||xTdf,²": +d-o[@Lq@vWcCu"eF}ڏϳZcRt[yjfRf-z{5QD E&"TVlS#d4bq{&د2)' P d?۹GM'nN̡YAsvt!QqE K >=Iu&Dj@2xjΘT?OոT{km% &+0t>0΋~XB.fݮ1`. {8FG000Cw^}?Tܟgq7gE7mDlb$[7ڭnxf]5,B 3- 7`/ѷ< s+tfIKFa9>TP!-@[?YWeH,MB)qU':3ފ_Ӫ4[oה"ٕq `+$e+&<[Rr3Jq@CbH4zF4Ao?_F5;>K?AGR5ώVOH 6%4Ce+@v?P"yv)XYRg/= w/0-TAFp^ISV!@G1E{Q+CK~2ʺH"6:J/g6Mu d"[;S4To׆IfqEqx(/n6CL6rB,EzxgBwɲ OM>Khde9`?!bUB72r\2:"S_{o*9bh1$[WРڒ\73Gor`lL_p@A]3Ř/SyDYQƩu ɀ6Ya>%YD&y  ڌLnT϶˿.ÿ4l4ض̺I,k A&"id&^{IhCm{:Ӻ[ c=Re#b6῅[X/iL~3*u)hW<`T[Ud%7raATmĄ'6BH";tR,Oi{[Ka^*8#ffBX_P7R&d b;l)0' vnh[=8öy*#UfnZH? ry9|\vάOY֖P1seOS (@ba*gS.a1g <"4園u5Z\|j2P(>_ ? 8=B'; *PJsHrMlh C hjEYQ`jA_2Ղ][(GSXStץ1nmˍ8?s|ej^N`ݙE9D9|]Ewv0BdwpIlֽS\_)w!X^&nbns1z'-v2W˜ɇDtLP~ 0%@eC J72p^ %T (&`((!@f6:DUr޳L|ojb3-%|PD- NܣB=$&,)]]XaM 7q"(]\ϼ+d+D<{@=v^0J;4JYe}LLR l,3P8aj=1eNƀG32>̋4Ce^x ,E4{)H.}T\7?&* miPeM6g뇤D:CQ~3= =@fܯ_qFcY{z"INe:")mUa+!Ld3#iq`.A2A (@ل]~ iVuyok)5_i.]N 1QQNf.9i}m`%1I .7<\W5%^ S--A|{#(_f+6"VVe Ra䝈LO0CݨB>m%{btݩI4Wi,NTȭPN."g$Z; Ibr$5q7F枽 ݐɃN11#/盚rmVxʆB)s!5 c:4Uׂ @jhFeUm(;h}“lJwaHgT2'@~oG ,D*j ;:_V؏ݼ/(Z FIjWZ۷ ,7 `]6cY%c]~b^y[ҏv [{tAm(bx’9j!jMDK`0NST+>I /t# n)~j_a"2FU@9l6F޷SA R{Fۉ\f܃;Qa zBl!]pWU3h᡾}# sF,3,|jf m,f^&L^n WO#S&LA̷d#ZCg5,3U5 LFRڬMnLZDK,6+WBMzy>/?Z@r;V* lܟ49'\^^4`{I]&R3li/TEPUV2ķYv:Z@YW,?M_0~Rt$\Eb#5Pw"f)l1vP.{;CUj7j|$y"a~(WGWC4ht5/}xpFw=qnݰC_x,~hN17aFNTMG̭œwO.LSB?; qoF{<=п<#j,w}`FI s|;Gz%/p 's)+BŖ.A-JKmPLY\;lEIZ8Zy~d"AԀR6OY} W n&USQ8ɯ kK^@|PYL[2~RmyxTQ?q`l)770-:[;Ox c5 ˠkhwHvJh,-Z@$*'K^R2U kUP%l ecH:rŁDzs=O_0dÍ삺%RS~qMj"&2؞ƙ؆?R-S,mOk>| ܎`U pqW~[iMc$zXѳdoNP5g62B\+s]/ Jvf]!̼Z.< Gر[$Bn|XbDg:QtR|#^( D4򔗛*ÛQ/0-G֢Eoay,0W%0u0n.sg tMWH$:L翖n r.P؉ż7݌IR#hӵEFjJpW6K9@ˆ;0#կ>̋[=2#m&{Ϡ˿R$:Ra,vŭNŁ@vCGtmwJoh<9Xkqr)[(GV(!+&ê/qחzf@m?cJZ唣8ՀcO[* e&vR0|vL)SӘF-t4 +2C]7`EȔ\F%%a8lMUl3^XmSw|16,$ _ 3菫W7y9e&7UCL2/87Z,tԑѕ&"q9^w@Wr`Rswiˇ<ȗP(9ܑ>BS1oC'6:{c YLk%^˗y0|]nBUt_aB G4uPF>5. .;h#LPۇϑw1qiq;VpX~kk5)WS9L6 #]DlA5h>+EAPzoxZġߔ^I4f *2ˎ玟+e]E 1K%,*o; 8U G﹫㦼l0._uDh9MU9A hmOuq-? z:tٙ1cw0 k$xY0D^TN@ ֥Ei4ݯWt~DagCʂg:ڌƴX(+*}>IPDt*Hۦ͂7rlOnƎfVz"ild t5^}dͯ ?m\uQ㴣 ;3+;'lύ~[HG [AbcEw葎aqU݆'hqh 6aָL?4=S0^Vb , 9}63:PF.=e#^8Y`h!?NƧQf۲'>>`zPNǿ@>4TG|lATy9%%Θ2Hamp: Z$ #anƊHkfq9 3cR $,Ax*t&ao֢3rҠPapZgyi@n\rp1>ulH5̱THD݂[Ƿ~80F c G! ʙq^AY^9ɼ)yHNeV?ոXJ,j['W?E#์avln19*q]E+ NO}v#'xX2XF/ ӧDi%dzr 2u"n0$e),Ƕq5x(.ǕI`$L[=f!OJtnI;F|> j)/Iq=}q Jh/PZ.FBNRz)qv^iHu=6S#~F(~H锲eK0;c8$~x$!QYs5.bp09asWVomt$ ي}r[\C?;0,1-X?Й@3'=s9wu-$$+~^:\gLU#]1d `Ov_"B=NH[]xhA;w "HӢQۊ^s{$HV1GfE@RxWKZo ERJKXP,D\o[X3E(* !K>Hu 9B.&]{ZլZox9ZXԃ12Zw7_yD{e@E}KAeUehOx[m[U>]R@ fmdA=  XQ9L4n g-$,G͐j5DoTx^l{*KUs<PC1 3֨$c|b-39h.Aw] iV~R[=冧"Kоó_uW(, ^?[NdX/j C;н(Ӛd+5pJFD5 6\L>!\@zeZ>|_)"];*hH֒8We==+"&^$O>PҪ=Q&#}W eVfkZ7DXZRf+Io@aqOFlv%.G>\*#p̓TJv!MbwNCj!54mw<PG@6Qß\$~$g1PeqbN-w)~j4I#rqG܎x-ƽŢwfG?Il b^.R\ *7``*⋼ -_WqYB Ǐ7d |L6x07lm=;D \xqI-C&Ȝ` ¤P҅|8 v 3jȗǵ:a螁yA/-H/`^OG7x-G܏)F*c<OﲟʸAB<@7&3%!*h`;E@*[Լ"WtduBrt+ǫ+R m{KCoOqC#KVЖ4-ͱb_pljr|rN# Y|+O On2d3}^ wG~5a :\Lr(ez_U-|_U LCXMԱwi)l*ufiUDvVs 'HE25. ]>KF-U|S3J [M2^5ofN0 Riw˴d%&MzHVl7LH2o6r -/y0i `gGRQH.x2<^ 8PJdo8ZIr&KtŌ'; KHȣf&4ʣ)f_Ұrэ6Y^%|s} wFr73 HO)E07ílXHe􄘕@dH\ KχSv#vb8:] CGJ{ُx)m^xѥF1j^לh–m:pǽ/N#8v`DdB^-z։[' I@ez75Kn:&x` ,%zdue0cʫ&5tʦyUDQB!.]g\4%|s͢2 YZ