pki-native-tools-9.0.3-50.el6_8$>NJN)iHi_>8?d " D  %CIP         y      > `   ! D! R!( 8 99x9:9G H IT XdYl\ ] ^Gbd9e>fAlCt\ u vwx x yg|Cpki-native-tools9.0.350.el6_8Certificate System - Native ToolsThese platform-dependent PKI executables are used to help make Certificate System into a more complete and robust PKI solution. This package is a part of the PKI Core used by the Certificate System. ================================== || ABOUT "CERTIFICATE SYSTEM" || ================================== Certificate System (CS) is an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments. PKI Core contains fundamental packages required by Certificate System, and consists of the following components: * pki-setup * pki-symkey * pki-native-tools * pki-util * pki-util-javadoc * pki-java-tools * pki-java-tools-javadoc * pki-common * pki-common-javadoc * pki-selinux * pki-ca * pki-silent which comprise the following PKI subsystems: * Certificate Authority (CA) For deployment purposes, Certificate System requires ONE AND ONLY ONE of the following "Mutually-Exclusive" PKI Theme packages: * ipa-pki-theme (IPA deployments) * dogtag-pki-theme (Dogtag Certificate System deployments) * redhat-pki-theme (Red Hat Certificate System deployments)Wworker1.bsys.centos.orgJCentOSGPLv2CentOS BuildSystem System Environment/Basehttp://pki.fedoraproject.org/linuxx86_64GeO@L=m 8 +A큤AA큤WWWWWWWML/ML/WWML/ML/3979aa1b4006ce3872cf1569a7e9c873c84d5cded342224b54c1683764ab480e828ce3941e2f154b0810ab93eab3678f617dd841db973a9a85d9db219ebc61e4a39e2c0e22974a35b15990aac8b6dc9c1e52876824c4b21235f0fe252786fe5d6dd352adafe71a44ad0c27ce022fefe67f4c2e5a0a77d3803b1a504b98b89c638eceba954f6bab6e2ddcf4cd7bba950a175d10e798c548b5224b70e8531142a6df1af13ab8e189c8ce4f2a70f6a6f9a32948de11458877beddefea9df77993c0d6bf5823021651d1cb53350adcf4bb818ac77768f5cbc43898ad06af1036b00e6fd3d9e470d519ed851d562c377d0ca63ecb3362379e17e9da945d9c714398430e5270f1993ad6a1651fcaef83c3adc0225ef809511770da0af2dd874a37cf3f8bf0967960116753b05be985e009da6c32c03dfd7a99469987b0e5a438f652carootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpki-core-9.0.3-50.el6_8.src.rpmpki-native-toolspki-native-tools(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@   @ libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libnspr4.so()(64bit)libnss3.so()(64bit)libnss3.so(NSS_3.10)(64bit)libnss3.so(NSS_3.2)(64bit)libnss3.so(NSS_3.3)(64bit)libnss3.so(NSS_3.4)(64bit)libnss3.so(NSS_3.5)(64bit)libnss3.so(NSS_3.6)(64bit)libnss3.so(NSS_3.7)(64bit)libnss3.so(NSS_3.9)(64bit)libnssutil3.so()(64bit)libplc4.so()(64bit)libplds4.so()(64bit)libsmime3.so()(64bit)libsmime3.so(NSS_3.2)(64bit)libsmime3.so(NSS_3.4)(64bit)libssl3.so()(64bit)libssl3.so(NSS_3.2)(64bit)nssnss-toolsopenldap-clientsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.8.0W-@VVaV@V%@V^Va@UeUY@U4@TD@T T"@S@S @S"@S"@S{CR7RP@PPP@Pe@O Oc+@OTOTObNWNWNS@NS@NRDNRDNI @N:N98@N)f@M@MwkMwkMp@Mp@Mn1@Mn1@MbSMRMK@MJMIG@M8#M5M.@M.@L8Matthew Harmsen 9.0.3-50Ade Lee 9.0.3-49Ade Lee 9.0.3-48Endi S. Dewata 9.0.3-47Endi S. Dewata 9.0.3-46Matthew Harmsen 9.0.3-45Endi S. Dewata 9.0.3-44Endi S. Dewata 9.0.3-43Jack Magne 9.0.3-42Endi S. Dewata 9.0.3-41Matthew Harmsen 9.0.3-40Matthew Harmsen 9.0.3-39Matthew Harmsen 9.0.3-38Ade Lee 9.0.3-37Ade Lee 9.0.3-36Ade Lee 9.0.3-35Matthew Harmsen 9.0.3-34Matthew Harmsen 9.0.3-33Ade Lee 9.0.3-32Ade Lee 9.0.3-31Ade Lee 9.0.3-30Ade Lee 9.0.3-29Andrew Wnuk 9.0.3-28Ade Lee 9.0.3-27Ade Lee 9.0.3-26Ade Lee 9.0.3-25Ade Lee 9.0.3-24Ade Lee 9.0.3-23Matthew Harmsen 9.0.3-22Ade Lee 9.0.3-21Andrew Wnuk 9.0.3-20Andrew Wnuk 9.0.3-19Andrew Wnuk 9.0.3-18Ade Lee 9.0.3-17Andrew Wnuk 9.0.3-16Andrew Wnuk 9.0.3-15Ade Lee 9.0.3-14Ade Lee 9.0.3-13Ade Lee 9.0.3-12Andrew Wnuk 9.0.3-11Matthew Harmsen 9.0.3-10Matthew Harmsen 9.0.3-9Matthew Harmsen 9.0.3-8Matthew Harmsen 9.0.3-7Matthew Harmsen 9.0.3-6Matthew Harmsen 9.0.3-5Matthew Harmsen 9.0.3-4Matthew Harmsen 9.0.3-3Matthew Harmsen 9.0.3-2Matthew Harmsen 9.0.3-1Matthew Harmsen 9.0.2-1Matthew Harmsen 9.0.1-3Matthew Harmsen 9.0.1-2Matthew Harmsen 9.0.1-1Matthew Harmsen 9.0.0-3Matthew Harmsen 9.0.0-2Matthew Harmsen 9.0.0-1- Resolves #1355963 - installing pki-common causes mode 0755 on /usr/sbin- Resolves #1290535 - Check for incompatible Java at startup (pkisilent)- Resolves #1306989 - Crash seen with pki-common pkg during IPA server install - Resolves #1290535 - Check for incompatible Java at startup - Resolves #1313207 - ca.subsystem.certreq missing from CS.cfg- Resolves #1256039 - Fixed incorrect patch for fixing missing subsystem user on external CA case.- Resolves #1282977 - IPA installation fails with external PKI CA- Resolves #1290535 - Check for incompatible Java at startup- Resolves #1256039 - Fixed missing subsystem user on external CA case. - Removed unused backup files (.p*) generated by the patches.- Resolves #1225589 - unable to create rhel 7.1 replica from rhel 6 replica CA because subsystem user does not exist- Resolves #1221900 - pki-core: cross-site scripting flaw in the dogtag administration page (port 9180, port 9444) [rhel-6.7]- Resolves #1212557 - ipa-server-install fails when configuring CA- Resolves #1171848 - IPA - port 9443 (pki-core) is vulnerable to SSLv3 POODLE (based upon upstream changes provided by cfu and alee)- Resolves #1144608 - pki-core failed to build with cmake-2.8.12.2-4.el6 - Resolves #1037248 - pki-core FTBFS if "-Werror=format-security" flag is used - Resolves #1243 - Outdated selinux-policy dependency in Dogtag 9- Resolves #1144188 - TPS tests: RPM rebuild failure due to wildcard imports- Resolves #1123811 - IPA PKI clone certificate renewal produces AVC- Resolves #1109181 - certmonger cannot start tracking PKI certificates due to AVC- Resolves #1024462 - IPA admin cert is created with SHA1 signing algorithm, should be SHA256- Resolves #1096142 - Added 'jakarta-commons-io' build and runtime dependencies- Resolves #1051382 - IPA Replica installation fails when using an external CA - Test patch to filter out invalid XML and provide additional debugging information - Resolves #1083170 - Prevent LDAP Attributes from being affected by Locale - Resolves #1096142 - IPA replica setup fails during CA setup with "unable to parse xml" - Resolves #1061442 - RFE - ipa-server should keep backup of CS.cfg - Resolves #1055080 - Giant /var/log/pki-ca/debug- Resolves #999055 - AVC denials during ipa server and replica installs - Resolves #998715 - Package Sanity Test Failures- Resolves #887305 - /var/run/pki/ca has wrong selinux context - Resolves #895702 - pki-cad restart avc denial- Resolves #902474 - upgrading IPA from 2.2 to 3.0 sees certmonger errors- Resolves #891985 - Increase FreeIPA root CA validity- Resolves #885790 - Multiple cross-site scripting flaws by displaying CRL or processing profile- Resolves #867640 - ipa-replica-install Configuration of CA failed by REVERTING #819111 - Non-existent container breaks replication- Resolves #844459 - Increase audit cert renewal range to 2 years (mharmsen) - Resolves #841663 - serial number incorrectly cast from BigInt to integer in installation wizard (mharmsen) - Resolves #858864 - create/ identify a mechanism for clients to determine that the pki subsystem is up (alee)- Resolves #819111 - Non-existent container breaks replication- BZ 802396 - Change location of TOMCAT_LOG to match tomcat6 changes- Resolves #769388 - pki-silent does not properly escape command-line arguments (fixed in Git repo)- Resolves #745677 - Firefox Launcher on Panel being modified for all users. (fixed in Git repo)- Resolves #771790 - sslget does not work after FEDORA-2011-17400 update, breaking FreeIPA install (fixed in Git repo)- Resolves #737179 - Need script to upgrade proxy configuration, r2249- Resolves #730801 - Coverity issues in native-tools area, r2182- Resolves #730801 - Coverity issues in native-tools area, r2163- Resolves #712931 - CS requires too many ports to be open in the FW, r2161- Resolves #717643 - Fopen without NULL check and other Coverity issues- Resolves #717643 - Fopen without NULL check and other Coverity issues- Resolves #700522 - pki tomcat6 instances currently running unconfined, allow server to come up when selinux disabled, r2149- Resolves #698796: Race conditions during IPA installation, r2103 (alee) - Resolves #708075 - Clone installation does not work over NAT, r2104 (alee) - Resolves #726785 - If replication fails while setting up a clone it will wait forever, r2106 (alee) - Resolves #691076 - pkiremove removes the registry entry for all instances on a machine, r2112 (mharmsen) - Resolves #693835 - /var/log/tomcat6/catalina.out owned by pkiuser, r2118 (mharmsen) - Resolves #729126 - Increase default validity from 6mo to 2yrs in IPA profile, r2125 (awnuk) - Resolves #728651 - CS8 64 bit pkicreate script uses wrong library name for, r2126 (mharmsen) - Resolves #700522 - pki tomcat6 instances currently running unconfined, r2128 (alee)- Resolves #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps, r2097- Resolves #722634 - Add client usage flag to caIPAserviceCert, r2074- Resolves #688251 - Dogtag installation under IPA takes too much time - SELinux policy compilation, r1908- Resolves: bug 645097 - update to the pki-core-9.0.3-r1886.patch file- Resolves 645097 - Resolves #683172 - pkisilent needs to provide option to set nsDS5ReplicaTransportInfo to TLS in replication agreements when creating a clone, r1886- Resolves 645097- Resolves #682021 - pkisilent needs xml-commons-apis.jar in it's classpath- Resolves 645097- Resolves #681367 - xml-commons-apis.jar dependency, r1875- Resolves #676873 - Rebase pki-core again to pick the latest features and fixes - Resolves #676048 - Installation within IPA hangs, r1846 - Resolves #679173 - uninitialized variable warnings from Perl, r1860 - Resolves #679174 - netstat loop fixes needed, r1862 - Resolves #679580 - Velocity fails to load all dependent classes, r1864- 'pki-common' - Bugzilla Bug #676051 - IPA installation failing - Fails to create CA instance - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA instance- 'pki-common' - Bugzilla Bug #674894 - ipactl restart : an annoy output line - Bugzilla Bug #675179 - ipactl restart : an annoy output line- Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes - 'pki-setup' - Bugzilla Bug #673638 - Installation within IPA hangs - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package - 'pki-common' - Bugzilla Bug #672291 - CA is not publishing certificates issued using "Manual User Dual-Use Certificate Enrollment" - Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error. - Bugzilla Bug #504056 - Completed SCEP requests are assigned to the "begin" state instead of "complete". - Bugzilla Bug #504055 - SCEP requests are not properly populated - Bugzilla Bug #564207 - Searches for completed requests in the agent interface returns zero entries - Bugzilla Bug #672291 - CA is not publishing certificates issued using "Manual User Dual-Use Certificate Enrollment" - - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package - Bugzilla Bug #672920 - CA console: adding policy to a profile throws 'Duplicate policy' error in some cases. - Bugzilla Bug #673199 - init script returns control before web apps have started - Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI subsystem instances - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #504013 - sscep request is rejected due to authentication error if submitted through one time pin router certificate enrollment. - Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing information - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation - Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI subsystem instances - 'pki-silent' - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package- Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files in /var/run and /var/lock- 'pki-symkey' - Bugzilla Bug #671265 - pki-symkey jar version incorrect - 'pki-common' - Bugzilla Bug #564207 - Searches for completed requests in the agent interface returns zero entries- Allow 'pki-native-tools' to be installed independently of 'pki-setup' - Removed explicit 'pki-setup' requirement from 'pki-ca' (since it already requires 'pki-common') - 'pki-setup' - Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group - Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP and TKS. - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from OpenLDAP instead of the Mozldap - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13 - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*, pkicreate fails Fedora 14 and above - Bugzilla Bug #23346 - Two conflicting ACL list definitions in source repository - Bugzilla Bug #656733 - Standardize jar install location and jar names - 'pki-symkey' - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #644056 - CS build contains warnings - 'pki-native-tools' - template change - Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from OpenLDAP instead of the Mozldap - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #644056 - CS build contains warnings - 'pki-util' - Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical cannot be set to true - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #635033 - At installation wizard selecting key types other than CA's signing cert will fail - Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and CS interface - Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse ASN.1 encoding/decoding is broken - Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1 encoding/decoding is incomplete - Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1 encoding/decoding is incomplete - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #658188 - remove remaining references to tomcat5 - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #223319 - Certificate Status inconsistency between token db and CA - Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory During CRL Generation - 'pki-java-tools' - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1 - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to 5000 bytes - Bugzilla Bug #656733 - Standardize jar install location and jar names - 'pki-common' - Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review - Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable started before configuration completed - Bugzilla Bug #620925 - CC: auditor needs to be able to download audit logs in the java subsystems - Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5 policy mappings (seem hardcoded) - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #548699 - subCA's admin certificate should be generated by itself - Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA - Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile caAgentServerCert (null cert_request) - Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited number of times - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #629677 - TPS: token enrollment fails. - Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN in a SCEP request - Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection pools not reliable - improve connections or discovery - Bugzilla Bug #629769 - password decryption logs plain text password - Bugzilla Bug #583823 - CC: Auditing issues found as result of CC - interface review - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #586700 - OCSP Server throws fatal error while using OCSP console for renewing SSL Server certificate. - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #607380 - CC: Make sure Java Console can configure all security relevant config items - Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be generated on TKS instead of TPS. - Bugzilla Bug #489342 - com.netscape.cms.servlet.common.CMCOutputTemplate.java doesn't support EC - Bugzilla Bug #630121 - OCSP responder lacking option to delete or disable a CA that it serves - Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1 - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #635033 - At installation wizard selecting key types other than CA's signing cert will fail - Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated for SCEP signing and encryption. - Bugzilla Bug #223336 - ECC: unable to clone a ECC CA - Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned by Reason Code - onlySomeReasons ? - Bugzilla Bug #637330 - CC feature: Key Management - provide signature verification functions (JAVA subsystems) - Bugzilla Bug #223313 - should do random generated IV param for symmetric keys - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory - Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on ECC curve names (not on key sizes). - Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple Certificates from the Same Request - Bugzilla Bug #648757 - expose and use updated cert verification function in JSS - Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection of signature algorithm; and for ECC curves - Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing e.c. support - Bugzilla Bug #651040 - cloning shoud not include sslserver - Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to CS.cfg files imcomplete when the cert is stored on a hsm - Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . . - Bugzilla Bug #651916 - kra and ocsp are using incorrect ports to talk to CA and complete configuration in DonePanel - Bugzilla Bug #642359 - CC Feature - need to verify certificate when it is added - Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires auditing - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #499494 - change CA defaults to SHA2 - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets as expected - Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for validity - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1 - Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA. - Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an error to TPS even if certificate in question is already revoked. - Bugzilla Bug #663546 - Disable the functionalities that are not exposed in the console - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #658188 - remove remaining references to tomcat5 - Bugzilla Bug #649343 - Publishing queue should recover from CA crash. - Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and pkiCA, obsolete 2252 and 2256 - Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added - Bugzilla Bug #642741 - CS build uses deprecated functions - Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error - Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time interface is no longer available through console - 'pki-selinux' - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer - selinux changes - 'pki-ca' - Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review - Bugzilla Bug #620925 - CC: auditor needs to be able to download audit logs in the java subsystems - Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA - Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of CC interface doc review - Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with admin privilege throws error "You are not authorized to perform this operation". - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #583823 - CC: Auditing issues found as result of CC - interface review - Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws 'Internal Server Error'. - Bugzilla Bug #586700 - OCSP Server throws fatal error while using OCSP console for renewing SSL Server certificate. - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be generated on TKS instead of TPS. - Bugzilla Bug #630121 - OCSP responder lacking option to delete or disable a CA that it serves - Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1 - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned by Reason Code - onlySomeReasons ? - Bugzilla Bug #637330 - CC feature: Key Management - provide signature verification functions (JAVA subsystems) - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on ECC curve names (not on key sizes). - Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple Certificates from the Same Request - Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection of signature algorithm; and for ECC curves - Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA release -- DRM and TKS do not seem to have CRL checking enabled - Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help correctly set up CC environment - Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in certificates (RFC 4262) - Bugzilla Bug #651916 - kra and ocsp are using incorrect ports to talk to CA and complete configuration in DonePanel - Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object signing support in RHCS - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #499494 - change CA defaults to SHA2 - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets as expected - Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for validity - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke certs in TPS - Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature - Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA. - Bugzilla Bug #649343 - Publishing queue should recover from CA crash. - Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and pkiCA, obsolete 2252 and 2256 - Bugzilla Bug #223346 - Two conflicting ACL list definitions in source repository - Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added - Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key usage - Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time interface is no longer available through console - Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory During CRL Generation - 'pki-silent' - Bugzilla Bug #627309 - pkisilent subca configuration fails. - Bugzilla Bug #640091 - pkisilent panels need to match with changed java subsystems - Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM Clone. - Bugzilla Bug #643053 - pkisilent DRM configuration fails - Bugzilla Bug #583754 - pki-silent needs an option to configure signing algorithm for CA certificates - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module Panel up to before Security Domain Panel - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #588323 - Failed to enable cipher 0xc001 - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves, signing algorithm - Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords with special characters - Bugzilla Bug #642741 - CS build uses deprecated functions- Bugzilla Bug #668839 - Review Request: pki-core - Removed empty "pre" from "pki-ca" - Consolidated directory ownership - Corrected file ownership within subpackages - Removed all versioning from NSS and NSPR packages- Bugzilla Bug #668839 - Review Request: pki-core - Added component versioning comments - Updated JSS from "4.2.6-10" to "4.2.6-12" - Modified installation section to preserve timestamps - Removed sectional comments- Initial revision. (kwright@redhat.com & mharmsen@redhat.com) 9.0.3-50.el6_89.0.3-50.el6_8bulkissuancep7toolrevokersetpinsslgettkstoolpki-native-tools-9.0.3LICENSEREADMEpkinative-toolsbulkissuance.datasetpin.conf/usr/bin//usr/share/doc//usr/share/doc/pki-native-tools-9.0.3//usr/share//usr/share/pki//usr/share/pki/native-tools/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=genericdrpmxz2x86_64-redhat-linux-gnuASCII textASCII text, with very long linesELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, strippeddirectory%3CQRRRRRRR RRRRRRRRRRRRRRR R R R R RRRRRRRRRRRRRRRRRR RRRRRRRRRRRRRRRRR RRRRRRRRRRRRR RRRRRRRRRRRRRRR R R R R RRRRRRRRRR?7zXZ !PH6M]"k%vzוϝDu݇=_h't~_ߖbVެ{<Xg3݅͞bj[Il(=9Z/bwr,pr"VʍES~qMZq34s}=;p&E0EMo#+b%*xgK؜RLLfFEέIp(U9;]sY4 ș{uy#'fXqDPemK?X Z,uR(+qx>,IҸrrB촀H2Ofx`iAR!pQy5շO?25qbv2ƽ:GTUCMu9B*D(TfIf #+YpBΗZ:jLM;>[Hl`[;wRc8C%I$+w  ?뇒 Qݡ"7ѡ2k?_AS]f6@mgSD$N!H@}$=c+ nn(Ԛ🊍7f+Qq8hl[d,J6j%47>Qx1,r$=? Sphef)߆Qrm5 ,c٪F/$m_Bo=hlmp@muլyS*1>r0`ޛ-q,ÔeX-@Un쩘βp$&%lxL>~ Kc6 aG.G# rZk_kgd ^~zy,蜯9oF+PAv+:UAx)hb74k8sMuhAEM_ A ͍LHLd5^* .[ 8DLpEYaָ%ƴ(5Hk+:l 6#>Jϖ;CP:L|D 傀T}ɥ eumR( ]ʽc;gDşmݴƅ>I%{-:"QҙȑGOZPAE{6pGFKb<le-hzNaȱ&ܩJYΥŎ@mI>yvv %2}2A 6ĕfb:@_ X:xRSYjv(3Ap8KeUOexo֛ڱD<Gf75`G*f^At_2'O؟yo/ndpu&%L$ 6~rטyXUi*L/O"w(uX kQoakc^v<^EuWy>_TVe g3xyx"!]=Z'l0TBJQ-FA$W/'ErThV@}g(FˤȬD LJ,ʏ>DiWvڏ_MRȡRz5]ouI}I/E^4)fi9wkV,DD i56N }:g^ޞ}8nX=-SIqM3$\E G>lC1wp+ .7],FU"F%埸M4v;-eZc#hO߿]-B, Gk- T% y'pC㬌>E41l_N;dG=k:_\0qiC hp_ @͙|)6~⩄] τғ9oЎ8CGx')ҜUƹ|*#֘j%RE%b2 #C.X;|gjP I{FE<-Fs>20P'D%=e] (j*,wKm)xg*  Ĺsn~CeGw-Raܥ+xtyd~іq =hJdZ⹊!PWCs՝V3j8kkyk=ɎEUֆO׈]Ĵ4>܏@EDTεvd"CJ MZxK\hsӂrOHHa=b 3kTB0ЃVC'?فY9[+s~JXNdenm'>a9-ieCkwTA2'q&p`BFS9;e.7#Gsk)q/̴5ϞT,|I&(Fͤ+ső/Pn@2*FS-nraLzF&BYMMi5[_}(>YAdu 7st|*Mv{'0cYJ42bSf~G'6um*A,imoYge#i"CBxrn ]o|:@ȿea؍܃ꉐRLvX 72Z< >qO;3`mk.k@˓u{ۋ.ڃ[*{v?~'Jőeu?OQYUtt6JhJZ^fq^t|}b> ۣæB#t(Dvrk>FpOdHG!M,'A]\kpö(,a[Io?DS1}BmaDeU&^ԇ'Kol^j1NXހU]rص^ ~ruc]+;r8c|yl8>{ײ3ְe"߉' {ctYL=QUޠ!?^ |!9kKLQp$ ) :7(֌zI##Hq"h ~fvQY"yӤhģḍG)Ja&tKF1#77>b"gYn8IQNF.:V|pK"Olu+Og'MB 4Qy{Z!^젦,|(-˗9!Ktn-N uֆFlTsk (hُ 1R }YK|:14]r79*Zx lB,-nIXo?bx"+[A?9w] Ft1+j4C#87Kf-'MӪHngq3{&2*j4z[K[Ԭ7qVKp0%cF{n 2ۮ]>Go CoK+sĀ1J]0xr v"Қ)Cz:nd<A qC]Yo!n0Zvّg/$s:nMO#'& c)Q5`hH-?y\=1ejk=x@e )F23">G&P'pq%bd}Y)9V,ޘXWCy7":ǀ;6OI\3}ڹ!˱NivUy4ox@}n궳N7Δ+^?sjZ/> Kv JEH0,ͅJp>|(z$߯a`kڕ~~2@"GgN!;>uXp k4F-o6R~շXݱO0)~liDJ˂$4 g2Wy?t9 ^S+۽ph?m D>FHyGY;O Cs^#9|ϡքVvL gEalO/u["oqL 91WX勓{}yq@{ai>ʀ˷!i"G뷹 -B#$@{@K1)r?5|eFٳ Vo _,vsy&z#=Ũ䮝Ε/Tz*SDeSfmbsB\K xJm_=x5=@F3YOV"_*mW9;JH״F9 )Q=~Vσ!t -VsgӂzUZ5ُ%,i2gy`,ONi)-ؖ}nύwm}Kd9cB¦̥[x( HJn۠gqnƦ˓y |a7{f)y/ hZpJp(kJh]g5Ξ 0;U'|)2$>FYdQo+w]ԪK'^Ncpz&yBp̈ooȢ)p ,( 5B[~X8md .cE6W{]l65œ1x[$2v&n![ K-psd7${hvλCɜzsIwMz@>-Mk4p@YKiP'<@c!0@QOuꉌ;^k;-Хmj/4BnD$tv=U20Cd+t-bk]x\ kBa5Cr|j J~vnLSf8A13 N,=957k\b%ݞ^޴c2{^\@ܥ\>tlݎgW~ o+'8.Qw2w7Qp0Ņ tk{s3#gXkEccrFFǎF rǝ}m-vZΈ,.$']Yg̺^Fmv91fΰEz/m6#fl_b[+!0_,bdmkf&/+bl_v^a`L+-l)4] K8c8/Dcɥo NgpCJ2#C5ņ!jkc=q;蟀U>a6oxsȠ ]/qCӂ# # O2*w`5mOּ"\̤fx Rʂ; G?τ!3PhMHAo6aVrܞ/uơ^Bti$'uq5BQ1kU5*2= uU%w0|OY7%P )dG4`EIi[^js~ ݯK7H>0Cf ђVk[Qƣn~n!`1UK}&7HhBr2j{B`˳)p0zc.3(' UDLD5]tw D~ƶqfЯ&E'b0r8r`4n{ǰr <؅ywp.#!~Ƅ .?͍nQ;_§қG<;Rbql|8h1ݴ9&g;ֻ̄x]9ˀkx3':OQXiٹZ$L&:_H1SSHh"s nD"xdj 1OᲖ@W/XD/&&\En+1<ւӭX]zb17' tu&Dz2I5tadͫU;!q8R>x36PLU-Cy+M{ fMPO9c+ q{)MX0qMM>MG`=Fcę0R:ri遵eau!*">d|߼-a14 ԞISe7O!Va}73[G픡-rꀊ7K)v"BJ e]!>lgRM2>?i>&0oT_7ҞlZo*W@@,VyFJX&TJEjHۤSyampͲ];Ώ$s^TZ$<_&6ϯPļ4wmLS\OJ&O?>ECTw"܊nQMQZ0]Ϫh,mOO1X/BNn:GcHb{0D֒FbTOteZm?~=M:=e!hO!9i`Oyo T`k8(~A K@d0aOރJO$Bi0hmŋ^L1<ݬF d5buO ;!`N`+Zl 5g*mXzD7g.1QJP\5 {" .NhL<jx(}GSwd4M߹B4u<‰x94&v8$/?BuD"'!4^L4WeΞuvI3,ӛbjSam`R]I|BQc_oxs=K1 98Zu\~PDfڱ+6yH@^l5rz$ڌOX:H_N%̄\сWIl',Z b q{m" bX}\ucߜSE 1ZCJ 'tWP3:W}puOn1v_6mJ&$GP!.+EbPsdڪr%y~4~ej6j敆sEo =5d:e1ArzD=OF*Cbu cQ %8v_M0A YH?$QP>D/[SdE~Wk<`Gegˠإ݃3I/}ZW!zy$mi|I14YTmB0go{3[Mqe t j_ƪ?ȕIM:/KNN 1w:"3 waB#sC /D3릗_$4ƒ`kN?%*,?^B9uKy GyjnW9,&JMEċwBH:F_b|/ }rl\ `R 0Aۅ^ /T/ЉT !)Go0ݱ"w^|7 yBX+^KIM1 ɖM. (eV-;4[¶!H9HԶ䨄M4"fwo602 Fqopg؅we$2ՒΦA5\Y-LsTK;B=ɠ-ˉDbXN7'TغEhMv֗]f!4٨TGUsmT5m| ry@6{]{&Ecr,W#e+𓲝dz+@KÊb]Ǭp g(Bt̷\*ѾP93Rnx?9żՃ:?fJٮ\ӕ~LQi]ÞӒɈOMw_ GdԳ;̤F%5=Q޻)%^l?W\%5 ʤozBaxjme6 }DŽ?U9)&D3zդ&Ъy׀e~<2y3NB2t.9RFƅ7})n }pTBwR U-#=Fzbͪ<)z8%>cY'=);k,MqgeC6){UNj1̍J΅9OzND)%Բܸr-xM))Y΢D{$}?z4eR_;]gIxopSGY(Sr<(Ib\ Ts~ct3Tj1zD#Z|%Ps !7@&|=Ńzy1;z:R_JZć4{_hAf/I/QN-30 竟B߰ ˈ[Eь߿rEY#o} qazkͣax OY7Z}#à]m'6³mm_|tO2H-lSfO"ެ>EeX2&>, ! ct(j@/" ږ^:$( I(QAA ㊀ y -!~f]op[E'Qݙ)(VV3yw Qg|LruQrF+isD"KtU$p^ |%awGgm+a^g_h-^/ȶLijy -; |ȎUێ7g,o&*u9I|ruM-\T:gF wTp[%f.I&=^xEAPX$1نaXLy/Vm4=zŒ mAہ,4M4yJfPaTٹ!<(p&o2 Ƚ) JH!)i%U թz AP4ҕ,oNWMg'Gn5Ul@f=Yww.16[^'5.D>%fv#s^` A."ɣ 5YXWD*rYFA9q)&:eNFBx/L8J8[bm^#<2Ӥ1.,.Ll۶z ީ tIx?~ԖbD%/;_㦰MD0}t 4ᰠ '^澕9*,Zn_m˨[C{~-&-$Yʒ6]YṫCTrѐX\i jcHn6iq@-C,1|]R^q?MrG]sIҔ6ڦUՊ4'kT E|إʽJ0U;V7!Õ{v/ڇMAsyDWȔAR6(.ց u,/'pn%͸w'bu1Zt:>#;2kl"o'Y>IG.WmȖBI+tMaP5/ą .QZ6$b#"׃~d!bdRr956#K@]@\zY3-;g=Wk%CXCj"bFe5MBē" G)Bn @v5ն! \,%YTiӝkm{݆vig'>ȖH\62;EEJ5>rTJ5%nGW V:*stߑger_)w`T̠f$J)Q 1j:Vݔ (UfSF֊K f#{[UO u\ Bv k 8[/!cACWc;(0|0??@!wH ǒiBl4`ܽ% "tUT v+힣dظ:3dz 3w tݝ@fxwD۾{?k ^@er Y5|_:`]M$OOC/CJ*rNeo7A=:x+7Ǥ=f8nmMWW{ c$TNkۀJ檰Q|j{t.2)ڧcnU=\BdgBі .JSD:\Ҙ JxⰲW-=bO5+'\}\~~ܚO跇~,GӚvqzjq4%K:R+D"GV=KzwϺn};.,>GMv㱭qMBL^=]4٣jԍ2y15o3/VpjcU&efȞ"s74zmA~gE"(QX ']юe.Em&5->z,mu{uu֭*W x5V羽FOVSbcL!U%n4a(u3%@t藞F1<{ Nr2:)Tf3zsltӋGm{׳1c++P\`,`l}G԰SU6y~\ ]cGN Mi {G-g+:V%B'n2#  Y / cO>v&oְ2T$xh_ J3TpFTZg(}փ3BFB9E~pT+%:C׀7~AHn֐;vO,8NB6'AV-X9g\J?_t&%)&Y;-nws\dMgўqg Hacts^>xţ(zum"5$5 :gGb҄mq5=0>VPX1ia+vkQ'_X!CQe~]\y$c%+K!6YM4^-,8M@Eۭy",kh܄X` ~\%zm2-Qi, U##t_l2 ݎ/su0֓\><֕ȬU\xVР&4n룘_YAƍ#RlyR}ZKnk))K0uluQF(T |euam#Dy]@!ZZl8@?QH51uN1f2."E.q*iќIJC'Ԭ(Yu4eePAv=W@~Hiu_G76}mamE;5Hq`<8HbVua[iEOd/0$)"ERh(}ۈ-tDbSo2 "a)),Y>t{" \VJ2 ZsCdf} Ep=3 sCpbFJ;[ \{susXrz3um/=mX~iY&y&G:F8{j=G|_ xꙴ 90xG4B3j%F!yЕ &2iU#զNbW >Y sB ܞWX_:g`o iD}^K #Ad>$mA&oeve hOn(^bb ;~@\e'i܂εNV̷qwY"8t<StF:*2c$ί{oT86n"5m728+_j*g_m3ŊQl $A++厑]Ũ#8j'MCZDME1Ym5* ;ف ѩc=2o&e/@}f׬y=L=g)Q5'L#~OޤTҎ gkn3IN4N؏Z=.RЮU J;}<.md?01+\o鞡R?B2diᆸ?7ÚHh;_lb| Rkc(HedqZY ݳBˢoXe\dž̙rܽ1/yD{lf7֑[\۪oO#t,勀]kfI\~RI('"i!JE[pFu6dt!`(?_I`.T3q!!Tl/./@Jr7|U&2;:0 [r:N<ڃ-K\sl<"=Ʈ,0U%ڰ5նs>ueQD A+{EDb.b]cy9Bbj([t1D]IrdR/P}4 IEh3iDH~t34߱b$Ժ& V> C+Zd.Jy&֜V1!Lg\K8&'0dʟʎG:vxnUe׹8JiFZJ;{̶ +9 AӺ"&uT(?n6~,n֝¡"ͣԳsBG1@~gXX c:R.t?n%^D{L I1 2S;,r:- "eF%Lwfyc(TFit6H= ) @"w߼,j6". AܯBLle{ە?X!ucҭܤh(ܬޑByOP^ߢXzm&i76ʏzi]e&|i;>oBhaJ`TF P﬒u Oy(r Lid İ`7dV}٭v̒nwG!k,t97_SQsM־IX2w4v++v]5QLͰzyg˽5f8\^x sEdP?ԐWA7K ]G՜QD¿중]ʥ<>lAsӌ{8Y.A?sn9:2,跪d*=~\xm2.|xa2$}DBЃ:8C!o:ZC/noFIZʨ9R9 x;O`1~'J%ȦW\CJ[W3 r3OV&xߕmy#*Lf-<#SXP]8k~=Նy D$dԱOhQ.CW\[ bN$w㽤ZFp`$Mᔳ 2S 8y+?A}͉hGŷhɮZ>519!քqTOȏR+B|"Րm]u=ٓw3SX֯dG~]pUқTs3}_ ?Bir0(WJOU/YM?dMOjpwv8L_CYw [/ כQp24P4++M8-pduhKX) Se-wT^2籲]Jq &#v82]sF~rіFڅKNi*xZ7=*6*s'\t^N.RO.!#%!@*uEL YSc1d~̎^C,-sɱq9U6Us P@[tpU3i]FQx95^&4ie#[x/3,\9xnxd=J)t)}O@zU{%:o[6Xj&uFJE>'ϴ|^m}m-D0ӥԙv&ⴥnR1KV @%fě r}{N9pєe-:e<܀Bڈˬ"cy%a;09I?FNKP?蔼)ۡ.:L ZI?]ଦ0S( WByתsQJϚeDʅK FW/^.rNW>' V;DZjŕ,@26(Ur\vKO0x&pa=:D;q!0£w>z?k7kU/8HUȨY ݘj Α W\g$~a e\|gM~h>U6֦87r&TZ:QZY[x\ B\[pQjeĹnYK;\ >r45TW.w.q~Ar]͡UlN!ʵT@ݺߜ>Kyw7/U*Ș2m!L1C=tC?G5KΤzGdB ۜ^zH[ ](+Q.[1"G(f[PYȄ%K`Nhi%gSOVm6f+m^k3r>AȧRhs6ZCAٰpxgRP68 `^W9t3=.i\VKl.p2~*L ORRc)h8#`\^~DF=6KZTt' [B2//jݵFk9 n)¦LЁAgX0α PKA(>7Hh2%/k C ʡ*F+c,'6^a/s섎A%S/nn-ړHΜ˘0+0f:rA=jik_+r(6!pW7;Bh}O- ;E<K6H;LcO+̘1\Z<ۓzǷR( E*sloFUCq@c)_%bb/JZ@ S}hھWMiSl 1zm1K1"5ꒄ;Nvմ[ȱ"-b쁧8۔ڶt/ Ehrǖg?Xp Lk6jD0E*V+{%%u?><:3ϯ&+\ oW " MΤgMtP X[&\A%ƇOWR'D:wo7I0*ޟB\3Zm3.Rny̍JG[jLZJ2 \ MK]uj-^L8}:D-Y@D^n[ @gPAgsmzNhދ:! pU-3%m ZGy:B\xkolbP'f3B&D˿)MC& J$:ij.w9s ~mgm!5I4٧N:gROUٰn3kޏzi+-ꏮr!zQґ< 3*[@m e3mo+xP{C<#YR╯-83jb~r_^@ aH@ &&\7ƒ~OsP͢ꒌtqkoCy70h :iJ0я OVskAD?nZΫWs~SamN/셍OpD)!Э@Q lz:x@9}BӭC>؈0,H`S(KAwF Tf{CnVϢWldCbLsȄJS]{d Sd0 L //Qq~wLyt6c0LiyhM rފa<<$1BTъqd?EiwPu>\""㳘ii'IJi =I?{Iik&Az~ҐU <79M>>Ic7e~B溵Uge:@4'o,AHHɉ~x +ү"lib#^ks'^hm,ӂˑ"6^T Pdz^d/խIfo+ʫ !MG۶[5BO<<<ܒ,cˎqe "~Dr/򏢪E,gFM3ђUgrcg`Gm[LNG p;kЍMuu_$uaHm}KO65 x_ (ɧ`*  +l vA"SaRY=ð6rN,u \o)_Dk Y/pBs<kvAFܝS7LD Fc7:5W=fjHc~ѾN:$Q$$ƻ^i ֡X$H0ت $yi&i=Hdb+4Pn:$#_qTM-A@ƍ>WxC qWJg)=^Q&y{V'g ;'gK+M۬x:v+K_)MXS.9|׵灋N;$飆(]φ"=)3zUX*ț [tm`Y*շ!Mp/4E9k58:d K|e/~5s𿩑>d(4FwPgI}̓>ՆU?:&`ؔTXqelO^j([ nd܃_IQ~ExUXwDžϋ<^+IJִhg]vvl.پ45H`NDn[nku1b>`;c#2p]MZM0W}楋//t Kj*[[|9e|:th{zHͦM\Ӳ[;9m6NBͥWT5k'[Y}ۊf< F`mGf\z|eXUf!>*4;iFj vn* Q6Qt\Jaj?[*w%'=xw{2ā3 3% +&tWK>ccCEiIbsy5vPv%7z\17Pʄ?>|XC ) R׶u'HWbl%'B.5ɇy4Ϳs7АT3?s}+TGc/`ʠWZ9!qaԍJ!Fu؟FbA&Zx:#MJu|yy.QuM\P Lxl GbHs=>DIPvA #!_8)kNj3M#"x,ҡs0vdpǙҙǫ!"ے7:aUg|`shXl'~kem]ebO7̬2>R\& NӍW[EڜNy4sNI8_ko,%v:i/:U3O*GMgq*荮)5!ŮאoJubeۄ"3ϻ81v\Xr sThqֽLPAdV@A0x6LaPM9Bl)X Fm&y+NDŽJە ;$& WQ.x *xFa?8~q@c[Egc[nYTKi,srN";|˃TH $wQqC8Xpl:=$/ngo x5ξ$?w %{)'#xʮikf> Nݧ#q'FK 0^)ĥJ=vY̷5o8m(oxM ֙^eMH&PbU{d1 0)"9EkV[Q}̎ e3HϨZ]G ^㇗?E.5w?AhyFrXpesWo5ou\xANB4 iL_h֔5E>l=R=![TDVݬ&3G6a: Lf~sL&3%J#1RJW{ij&fEz=#^bEhẓ-|=lD}"1zD-9nq'v e.󪟐/JqV$*CTm@Sm\ũQP#uy7}w: 47V_Է Wx\M-ƒgF5)x'8A~o `*zW搎B zͦc9>jB̰|>"x᛾ JC:ׅC| ]XZ@#/֣%˔"UH2BH ;P+d}wPVˆ ܰ;kx乾/ RQ"~"n(x۠&3 /a'R Dt(6cz=yR,[ZFUl%_F|ϻ~?:2ifl^˷xܭ~йH<>#.mZ ^Vsgf:)u_f1Kҍ3Op*R9RAC59@1g xPb59A9sFZ9Kz iE&ph2jztS-J#bmL#i|  n--.{Swe9Kw1 ] ԕu%=)^ԴNw"bbO7|rDESSJ83[Am ;^x,Zͳ &Ҋ.jd^C`j$KN:Z-oV80.xpl`*4s xփJ'Ҧ@!k4sd=9sFZmh"VUmuhx!TJCpc2qfdIkA8 d_D * GײB3.NH_  8ض 8~Z%B=%O ?rm?"0s*I:E m9 ՝J!a!̥S4d"b 6yŹ ɟ$cavuէb(H笐A|*_)0DIZX?mY NENtQ|a=)Niѿzt$-4p͈pH S 2~\qAVX-Ntsmu/3ȭ<4֡ABSqLQXt3J;[M^nOwZ<Ms1+:*bM73Y'ַ sp> 1#K!!z{SS'ռ}@ճvLi| f D Lw9' >idmjF80脰G*g n ag6];T޵uΕ؛ӧ}d߸JCs2Qt86tX~1Rm,u9\N}OJ1**?*w"ly=ɝa)=q}GE.Ϛ+_m7->԰@Kפ; $uYu 0d0jvd':3 лu%\( _ yuyZ`Jb9s Rs;lН _Avr&u:|! 9*vsp~:M9Q<ܮL+SiþS鎿avt%tQ6.$_n;B %sFȏ(uU'9WeZSLB72sBh,jt|Ot^h;fqu]w6둁K&HW?fbA\ȓV ̞kЩ]M %MGsag|JZLMvpn鴜tmsq0XLrJeDĄO۝3,tOB2Y8ކ{Mhώl?Pq.PԬ8xޗ_WTY3M,fhJZDv] Z0g;.!k̗):'hW?'V@t8^xeSpeS4:|%w#Ӑ{T{ 9=k"u҆ףe-͕-"kә; :̇Qˌw* :1p̵ZUa$7FHQԇ{Qk)I`ox_ |zE17př"uxB+ci%s8jH(qrkA]p KNZRZ3zn!&ְu*հlʁ]MNԛkKpC}mL&"vi3T @Y1_ c{LmcCuy &~kwӻjXCÞx2>e};W䷂Ȑ,-20N9yŢ Wa=.qCǼ v֮ܡ.1J"-[f\W.gz[XIOZe8E9%bԽ0-okwm(^)2Sm7`BՔu=lG)&txs^#5ZL~BMp@Ce).Ndk -Ys=rb}XBQydNT9{ސ9ܳͱ1~ ev8H;RLNw߲1*ϑyRUBTaPX e* {xW̃oU/.+/ +n鎌#75`TZ=x CnLJzF.+fydwOJ-:tuJj*Vb/uAq20_i*ISTW —ºlc]'(sF_9lnB7O#.orc+p1ގokQ6mZAKS Njs5l>U ZllQH-~G,A GHh똴_sՙCN%axsjq$mYs9DĢй}<$W ;eޣ2 u"yKtJXf)PC{} ,wAv!g9 OoնG^ʱQt#V$\kMF#}ęg"V2iAG cn zĩ. Ǐ;; DG?._e謉Lf g0N-uq®IW̰mȟ1xQ}?9CxHWx4$׬U+aq0+9 hiwt]ʪUVTL*Na=wa{35*ğpcmuCxV?Wrq1`=<FeIibkVSwiuD@qٻ1+݂̕bU_u=9=4vVrbSXgɋv/p6ЮIa*iM(eRoCkiR z+6pd4A/QE0,@ya;ka[xJI+D+6zm]- .qVv~"{?LOoaʸ@Zz@us*PLZǘl .х4*gg N*sDT4D<=SCbserS#>_"z;sDh;q/EW1KTnE Ǒ[UW] rS |c/2ZR;]Sm 35X:wEuEtp \!!lC̠@BEt?8 P}w=nv{npAdXqg*s!DF Lyl'Ԁ*+U>V@yPz, K Gzb\S ?t N')/t%ʿòK8QB(f5ϺJ”ncHH9N'(b.+R-pX,:5ZT"Yk !&42+}o,|̻7-ܢ2Vn^uUm>-C]%K/IX #Qa9:BXL_Qv*7wpg¼̄-QD' 1[2tmXqTC^b t@ UiП%Z|զ薖 u "\P[q"}$J 1E6G^¬u+?JjC`EY}FIM8c>0=yô_a[*tb)NdG+~{D-2bׂL.cgX\&m%6rLǍwTV]N*\@}/5b*7cOj3tכ?z b egpP+Zm",Ȟ9^ru|珐/,boKCR[&H[3_$͐> %$`*ίJ: b_&)fl5D)aicQdU=oc]YB(9@ǙUEoK6:QtG:1V@uyK"ERՉayy.i^/m9x|[T".ZX 5"}IWFQyU-:kڷ/)%vlT0& 5NjWz͎28y;3dZ'a;랮#H}Ot FBnlq^)ds}vAmZʇ TCjcCY,f1Y{k`(5 gW Ѧ_̳~;EllF-VcГj6I2 t6BEoЊOI /6OvΛ~8# ȢyRZ(ۗAm'6<ɣt&xzu52oozl?uadXtzp&`p9lFƣ0:k WbgB6zΓu`x$rs*tOsD-) ` m d?_lix<")m6/QͼiV@#(ȶIEfX# N 1lCuz#3YZHѬRu8#H~4^Ԟ-,(2M7h*lXCJb X=DIܙNؼ#` 7rKP!b)bZJ a]py̩jV%Ἐ)4V&OĘ;y+_p+#,a6:Bν-*! TP , [5vh\^?3"KcU ' o)sVX0}XM?ktg[M M`ub =aH^=~ďmnע2j5zKj ~qYr1 ao Xnvle4^A6HH~h2HUQ"2qPׅC03ݿ%Qr} jfIIޭ0Y"!wXK7ޚ>0;n/u`'jZ:^)uG3 {^ɕqʻLJSgDC#pʇަ>#HǠT$.]NZ@oĕ YʭK $i|;68x*(N?o!t6@\ɫLHƨK >׭ݼnNͪ`@a%i-f|>tʛ7f}+82cyf@^"u5Xg5K 0`(0o(0:mٲv܈HKSƧ*@=LVpwGwӧlrLPTМ(}(^ɂ=פ3 "#虰bjOBƎA*DkHRt.I}J=YRyg8̾Q/jƏ}0ͪdKԀ@QY ;&Rd.S}+Nc,a+~ ɶ3/ ,R E} f#BɥR~١ю(zȦ)HFBz++7!5uG?&V}$d.?EvϽ(.\U<6-&], |(Bcùd|ryt1nYBA"dl"E[=}&Hfgp;ɣNK\[6M0m(0Yl־k [eReR`WTl=%q|)i4^4mmp v8ai4>Zk@AT֏uj!VJN4VtoF?ۚik4x4"& i6A^7h˧3^&WA aw?H;5E' I9LPO6Fwv1nGu@=: "ಋ2QESm]87_jugϢN#/)iaAmJBf\f!0X$q2&Q"/Bny;(yl0Q<^?,i^E O-?vj{K6> kъvy9jap6|߰ڪcxkd|oyHn4 ԏ }m<#՘9a=R63yshWF m uO!rrw=AenN)sS.t@,Z}tv( >6X.hj u>WPSW(U*-㒞1ֶwcbn 1=T8xʜ!M].|w͓e&1A˓X @SLw^6.k. lhOhvMT X2k֌2΋͔ M.х+5 ƪ?ދ\t*ȋ!޿ rn# z"ɟxXnJQ\h!UQy&Z )W×nv wD(7by-gBu\_?;nh঻L,Qr~}R%f832'np)yN -(~QAQjSe`ߙ3#HZ._Bړ13veح~v@ Pbo{@e<"V;Wt& |HTL)R;Y _u-yL]U̿wou>DB`aD~,ӊSp)ԹB2FS}8Lb*6I ^?>yp[Ao*@~E22vH })5rVԅ䈢ž+9RLY4Gr/2~Ri !Œ:!w .Niϝ )"JtTPGzSg x1NY2>K%G7t?i+|̪r7 54=/SF{cjR~TxD2s j[wջ64[s4:»[W&,翛-3%M۹%}e<|-Du"0~UmyBxĉ<8.^үۣ^*u6yR2h|]6 .P3zCƛ @7,qrFÎٟ/)!!60йP /nf nSStXtGdQts.Hw1s`|Q9:j%3-AGk[ʕ`@Ep2isjlEyTN It>PSvMY{D.Lʣ-mzＥXQڕ#24b&e4LEڗ"qP,yw9@Rf2V/ ;ra$fOVu[P9+ٴ3?AƠH'sAv5E{=h2h|sR,?ԕ#ܞo@ti@KL5#ȳoڝȩJPyƞ노_/4wbdA)SZ:nb,&X% r@oq"Gq₳į[{Of`BPTΧkU]_ b^%>AV@7Oz桨|*=e\/A{m^YPZ@+Rl}k|LDZEe7Pf; lv哈ǨwfAJ @W1s&UspBjem*UEO &UU PP X/1 5Hi+3+.c[r, hb$~C]ܚ(aZxKYׯ>v4ΦHZY`K6|K}P1 ]j]Q%]['#=$̻G>Z4shX Y ˼ӄLR4Z󡏧xY1$N#S1㳽iHwxMfޜ`k Ӂի(.$LhsmSKx UZ#T#LD=㤟aS\;JVc/2G:5Qleb@b[>Vy99n5:6n^?B$@t+5*nc|2FH̀ #E݂pU /)/\;< "$6Mɪ[hzw ;[4S[95u$yDZ{={IA9 pNmE.7 )4bk N ] Qzzⴌ]adC d4UÜ̢w*S+~ñ])P{g k(F/ X!xSuyUϭC +!cݾ8p@~XyHӗȌއ"Z'rjcǁRVs#]qKaOEo֍ᯃ GK٨AUYhu3L[CqbA'zLLLsXb:ìAжyQ)ِηB7͟Akbc]D΢zNq(=eZи*i>95/ $!(d2 Bgd6 M`B 5ܯZh60z좤X>1:Zjx @m+rFĪ^(G m O;D&b ^L5jһ4/|Z`frHBTa%|I|?ZzE`U]$},-+ļW !(00YE?g? :5B.<{H'f4Ż.z v r$E+RW7ZIDDr'E2F,}i唗fh0R k-^Itw-l$UsG`I J}Ji;IbNY"L2 7w92e{zB{?T^Z8%!?㘋DKu1=Xc}%1XɩQKV S# F" TϱhHF=HvlZd-gUmc i2{_YYW 3֤|*p^ ~v3YHku)NN: hOȜ^ ċ=qB!n8=,{;*9*erl.bY5!Qڍ}+ ^@dw3pmͽuKbN"F-⑘UXg11AjMrsoNu3ޯo3:Wax~Çnsg߱CU6^r\34>S pCV?IF~twTK3HT. VE::U) :VfNXBB  n$dO?o̺~ Rd<);6y D\! A d`d+7-n-#CIO c;F7'Mdl>vڼUhwyOna~ixSWJ6d^d}qM5EiQf)#qs$fhW g3g:`yL47LSYuMfK 𳿺P5~z)AFę8_;>8@RR>sO,Y WmGiX=_ߠ9{*T]o;#_f=1TGQCVېv`wE3}-(a,"RϠJF ".1(8eGuvcB:G?c %)>Q9""tʈ$H3o!]cI>nI\El>(K:zy0eFX͗z-ͽ؃i.?f9$DèAL2eP+&2B$)ѡ镣ډ(&(q01BE>aE 0Nx_h9nqFRTb-Һ"Ves' RClKY-b ū"G+33ƍnOyVy VHg2 .%2ק cSy4*O./SX ;+N).}t2|U@eA@dEyn8O+zCu'uh" i1^| @YTah|}Fc+ ӷuҙ¸z VBZ$\5}[Iжۯl&S8X*e_8 >FuU9owqrP-7!G@$

VR>.[?.BYGQd:(^WBlk .- ._In+FXwnyrNh<,-i.2WQ8>$ *S؈$O ϡY2kL+`* AC~]=8^/ .9H NCI"RF|_",V/x}w%_'_ m(ɻw[hvraIZp D\B ih4`_s ٖA 61,W|:@J/Z^kܧ"HQ'gI6 bw軱$rL|C@c1N,/[ ɀ;A*OeCm2SXN޹?kXd}tHK9!af^vT6 /5pD7y9 DhJT[bk#i-nwT#-b9XK]|q^wtI.WaM@;0ڜ\pP/8(19a/׹5胀ip֎aa5KGQ);I^}붅g_aⰾQ̣V_sbYb BIo_UOv?\?'<3udF)>F7ޘG{rm :}F.P.x/<Ȱ6GK+{ ZABTs0~M"(]x!:+yLPDS>#uL1٘mw34V2pn: 7NlG'q]>ʞ쾄}Yd~!._iY6[j_H]N7R&du47[ `(!1;4c¡FnbtuD&h7VJ$ *ƖgQeq|.̲s? ֖ 3`XtLG lcKaJɛ& fgO_fB̕Q eiryOiAwFV"y)VcI> =9Q㹧~yr2s,։8pH'rP=Wĥg|k9*{/c6ח<ʽp}t24Od >9K -^\辿->5Ș]JZt_/J96x˟ ) LL$6Fo~!^ YZs8LAޥuW~E9ecإֳ iOv.DqC~Ju$-r sDZ*vWz Wg5|H@U?, bN9]gjpYx7hMs 2FAX "q09!`߶5X$˨!Gӱ,T7R]lhI+g-w:HV!q+NZn9s@]ف?h駺΋\Y:x~?P" Ăb(Ռ'k-=FAlUvU]~(u?"e*hż? CKY/xN=T$nZ)1=CPhz~hD9 7lxB:E]nVs,upCɪ0)kWp+NNtC>vvc&MQn&z#"Sd$m7`|nJϾPחdxyMJW{;7 5XaqWq n@T Ů.?>`aL@}vFhԃ=`@_AI DZ!zn5rH~نǐ۟9 #78eįs00/aBdz-jFN^y2]ͭkXv8,^sfXV'Ǩ= 6UC;ELjtly7Sc3{xCT>xi |jԉ=fNV"Wj5dF)BeՀ|d 8s[Iᵎ∧kFY+`;OV_]bj@&N~>OyToX&&]3D藍 |?$<&Bړ]p`d'StS$mېQn)ءRDgkQlR-?Nw710!6~CWp#Č!ssWH-/Qt_4.}MpSxRgkp5۠ [5G;UVcjEm:өE셛đֲ߉yzMXoG[-^imNHgФsw^EO], 3Hm8fJ0%O/t'#\ՍM'сAǔEc*1f8F{܉1*jT[>Qw>̯-!0bMDM;T=1'g.EGޥy}jӵκ^fB*n [&Ld;`4ck Kd|L|gz_pK5BЇ$fM gDʞFD zё\WdbU2&C/FJ˛W *E ;o=׆zV}Ĉ6tnKCU[br % x){Q( ΕxS >091gu@enZ#e$ҸOfe p+4uX ֟U py@ev=%Scz;qL YгOC1n ͪ&* ٻB/ܲn%VQŠ5U4)R6dBhflD+8<:)e}z2 ${Hm'^o_MKeO`k?{ϖ٥^p@+K˄[Z]~!7>RyiE<]$Es譌deKi;)e 8x?=G:y,iHa[5p*m$|F63}/1l&A1.jK{@Ogy5} `f Iyƽ:iUy"Z<(Ac`R+5ٜjwn0]Oq0԰LO~ҰMbʧ-[I?`BuYsuvaq$0 >wd^qt|I$ᴢѯ>p]l :tƆJs1`b0gFqqwf芐4XY8պp>_Df8>ŴXW(sD?SLrO*Cj︞wqnA;㊤qlb=Xq Tڨ7#z?ݟB\/'VT)|y܋| žm[XW+FkYV4L,t@9i?>Ѻ4z8l#ʰ;+3ǟ-LP.ȈWP[6`פHH&Sj%0a\E:hǭ|56ēA=U p@ZSDT4|lӑZ5 [YF͑D|)u -4 r;6t:}?rБFsm*^Z|eSƭ;qBB¥1ù|vs"[{vfvls0)˾q˟db*pI۝`5 )hdFY1ҷBo1/ZvFL z3+IwPZ]7$&倳 [͝0еFS>ȡ>-N+īMvSa~g~~$<7Ee{m5P8-~ `~ ;Ok)v^$KR}ul%k욆H=i睶j<7|sS A-ӍYִ aG]41RbبM>xHm ECjCP `Gׇlйh8ϵ̾ ghe'JYCin /Ger5 PXj@]$>u,qpԩʄCD')f=,uJ@\.ZY&|;iA3WMSt!_q-.On2Z FeCk6/IN] jm9TzR7I>sSVij &q"b] P{ *p! `ۺT:7hb̀+=7˸AP^}n0~gWNƆO 4b\kYb$^ ^~܌U[W'kS.>^A_rnDwkFo^}6&N$⥪=JC1 q5HBj..}wϕʾ|.@#ʶd@\`bb[="*cs#mKS_H7JGq{hAҥvK95 !B#{@'\ U/OFta ]}HXs$hx zBtt LSq׼B{o0Ynq@*ȤcWޢLr8?,؏ ES RXpVtxǦvGv~w)9*?=#¾$;fYޕF8ߖ~ድSD3 vmcFȄ.Sj( XHLލs=:H'=,@ ;Si8X(KwYn9|!$U ɝJ?˿FBs,͟gJ ó|yTl|՟6[0[d * %D< mL>7{hDg?'цKD24[ΘcyCo-iӘ0Ovѥ^M^r0***?MmNNPnJ@S1T6!kS0qD7)b&‹0n.J]X[Uݡ7[(c3FZR%A1(I}߂ 9Etv+(A.J竮_wW`X4o93WC +@'PIɾ:hkP>ƆEcI#qru5(e9^K>VaR$P 7q05۔y!Sҩ֛|tP;ƨeMG $6۳(iڍyʨ!t3\q_^Yyl2J/7x-%Z'`8g1mtR)$ST/ Ɏp%'2{Ûu*YWyW qΗI-p@#I1҈diO D%{_vr+㰐+tcFE"!:F/JTAoeVY,_i|iYz%tEќM?b-P3wSqz ~t}(É&Y~yU,szg;ˬ։vOil?C'GZe|(cO8 OƘ1m[Jbƛ1k^,&1]dp M!y{/2|-=EZk8{{8?~b!vlntC)P9!yͨ,׷>[iJJTg' #~b%yd@/tipu@zsL2ЈnyAIHpx -:>Dɖ' "tW8A*꠰soJ_qʃ:ϺmO .I1)R N-͙W5n֘o7e){/?'zc= sD"bGi9-G,{pg*Gfb#*pDfIK4=vz(pOK\f) ԞPNlE .nc7_rF ȶMild$DFk?+Qv [.ghg? ugr(&nʳ~:^]›L#|r,DΝuc¶F( Fwp\4}2unıYl:)lxbs*Qw~?MOJ/ln)iDiHJI74 LzօVSm5F@~Nމ(7ܺkp1!qҍkI2jye?ro{Obc!znrb\sD`kVQ> ^towXZ%QB:աg}zs>S bJR}?rǒNΎ]&0?PjG#z#ZB"w;q)MIȖaȯ2?*' V1ޑNdJud…SQS˺9"Zw^^:LU|׫Gpz ,b^\ _G6l|"(ô1n[>ro Kw F/}|]_iAV32#W,Vֲs1p!.5\ +MDvYZ`"fxro^([>huۣ\;A߷8qJ.V2W=[G-s; 3mQ?ؒE;P >UDpX5P:" e|7 C1n=0l'L>kvCOk )W( SƶNģ kял(,QE"vcI[?e_W\k1z+013 F/s!8GCbk43p&̵idQں[;0fܝSS!IW$nV̖ qH-љAސ)BWZ"ͪR ]ؿYoK 8&YRC+ #EŷG=P$fhB x2mpMb~ жO.ՇZ^dtC" tU"^*kT)%/׈ԜY" ěH`W )'0l},k-t:"}Į j-IQ0ƝWL%LY$ifq5!{UKޠZ<]8=.mVZsOE}W/w0;~)7zRSў9$jEHpL tX }~>;u"1=&k%&x'f1P Km]%:Uw/)[#Ys;Cڛ#ߛ7Z]lg{(AK:EVfׇoᴢ1,[ ?pT p8y7:36wmrf.pOF bz}G(e,1)vj{FgGy*FCTߤE,G Е +{ZD #x#%weWme,o*)b!i[Z.v1tLVJ%sbZ?T)יEʈ$=nh6C6/K94L(Bx`0疾| ,I;jۑl o2Ώ~:> p(8rRgw1@̀9Szurh,V/)1ǜz9Mc"*cuRUXe aoZOF9܅Vxd=f&dܺۧ8,!Ni:wDRMw7'"LجfEg/pe tM=՞Z#*k(v,xYCPu=K.Lv/6k;Dmqd9d~ 9u9H×ffKTS(8ˊN-lpzfwo?IxFpi!LgP @O]OZ3=ażi^:y( =TLifqX'moњ*8-Na&WKjsC "^Ӻhn!#l=J5Cæ5D:@Vą5I,OZ|t na:% IU?!Y $p=4Qdcct+61+Ne6nm:n{k7'2_MgL#j2N<*,輓>pz*JH[ϫ\#4w,Sǀ AršK|ɶ_TV݆z\Mʺrtҿcր3>PmWJڥgv֔Dv g:6@$UY]5>d6a$7Cg /9:;gr‚)[Ӈ[TB 3As٦YjAL 8 {8‰lpV2Ih\=U%لL (y7+X]*b>dx" zZԺ i6Vp]d0^:hd7޶hRR>y @\Y4_vnm}%RdS`'ٟ->iEU%h̚]>e-M0CÓ,)2AbȤκh Wt6а4+jPjO_\Ѫ} +Yk{%$SodE3CuZ H%NxG#IkUڌf6=_c4ÌJ>XN]kBF~}d|Q t r+36(-}c(d+E#MN[뽟 ב&fFv爌t"/pȋލoSzӗ䩞Ѭc>AYޜ/'&zMnl]0hE,}(j>v)i4 k5M 68yzQ?DCO+HɣlbKS2xE1vSCY'..or RNv6@IUz1ԕeOZTm4%Ɩkcig(k m& q1Mq ::PNv1V#&Ms!0a.S2X[eN\g44Ɣ8W7BĬ4۴U: ɷvb'&Yځ`Qf4 %{uɖ] ql]~5}8!-R@'PXNWnQBۮ# ‚sj>tzTIK紳;K?ԹKt$~?r '۱Ʋ LsDyTx\W;\Bl*Fx\$ 2鳷'(`6_0_o[:NCJP`+ !㕈هWj=y8X˴ `-:Wk CmO {$YtV"घU c8+r|Z_bxHnwYtmg-UB]e[dK6 hīf[/ I$)6ݬ:,2`N;݌ KB$pJ }7:cRuyQ4%MFaba. # ZbmicH:xŀnGgFG5ҋR)SmA1BеP-PbF&d$ \ž f1=gX!i:o'o95MYQ&g,txTpހ<1Ea"Ј6=`y߿;UŁa,lXb=6_f CɣFel:O߶ۅ`3Feθ0MY(őuqY̗!b؎GZ W1@#Z9}pGqb?0vi_2 ?bްj05Qx4r>|̔~(b"{9RNL$=hޜEcs ٙO2`O~ǬB"R$k7#' u`&uJ\tͰFu9iE|[L 1PAr&kOgʵ.0C ӹ1 X9wRBw0anvoLajH~\SǢ`9ΰ%dyf:kn-fWZhhpm#Iޭ ǥ#E+muu/)/-Ztta$,c%T>jrn;$IgbSC۲edZeV61]HOOɾmR@+XU_XHɲՇ¢mUVVCޒWꯢ<,C&JAI+1"PNY(X};q~VC+-jo5=2?~-V~ +V4-3k6He!ވd~ ;"mo)B)~0nMΌ: j7Ȣ,@B(2E~f^ {, Aj>P1oaNgm2 ۓ*_].b|E4;u N5w/AY@*zX!)W{+2iV'>F+XUEpM۞)/q[p``}EX R,\pG_iAB]0m6 kqWNOVƣmAϥv23v=kG^(PmBKw#ㄷR3}.x㩧ͽX4ô@}maTqpqr"¶Ǯ$]Z&: ~KC^w)rsBr+Y4 ͂4/ސOϵ0i(y3S _]4o9Łyl~U ;OaeKz"7?H,hN;ɨq\kEz2#o ZXSեKuykf(ܕZJ>1S+")N-J|Q#﹇΋ }֦d.-;#,.X+[t M6mF:nI/z"_*s %ey4VxlRQB6!Q`&"7!2H=":ow䧟Hm̋Ԏf+2<4wR+dbo:AÉJ_*0^XDr(J䧢k:i51x#Сz=1xBCN  ٝe_,j  iDp8@e3%e+ ԫD甅:#"v#l*&-V濤pC;`gV|`'\^^p,a?$pywq6zk|fBzdLlTΠϙ ,Bw~5߁uZwF8^.6,/ [}=&Rvok~cg)4a[j'x{^!an+ȗ7Zi'LiLuXnLe$Y7_kgqT[p (U#!eر \U[?l;pJ^D0)z.poY*JY-[n>ar\cNkad([;kYo'*\eb g(8|}7* -s*"@r:~@ﮠS+!l(& +{t4`OY2C =v[G3*~JZ-< MRٝ1&ۘSPj{o?I&n_e#6˭ a>%bEYܱrp] }/*kNChj^X7C1@P{~'/]A)EXЅ ࡑ'})Rf{I,o;PΞ\ȣиhfC˒2%+UHQhVh[a19>T~Rz8O("w<|d&IpKXеmIјV@$-mP ~*L8ɚIg~luWAw5DͿٝ~91}`2~P7WWq ,Y$8BOEjV"pqڞ[/v%&'*Muk3; y8-j52QK% mz Ua o!3yYK% jJbUNYҔ OW»-Հ+P>?,3G4{AԁiRRáL€,x;V_" \L!j?AA/$> fEc;|(k 9H.'inPl YcCxMKJw{Ǵg?7[c-qpHD4ek}fFF.z4ɽˏ^QQ3loɡ>3h=56zH} j]M _O^U$[͡!+M֭g7Q'`X6|n3`,@ Ҹ* Zm[Sq"pܽTī9Tp'B+ JKhdoBvHbyH;^:_+pr*%~a* u"i ћ0jߙmx?$I2K r4MXxܣF\ޟƫK5ۅƛŮ=HGI?{ MozjW;MD8L@ |StcF0#b-=5 4ٝYo@*#y2m)~ݙyp;̲(^I( %_\ERpPqw4|"ýUU6&!  1Am*|mv=!kҪY=MY+܁o/Ob gAɊ(&]ݑnGK*?΅Ir@%aL_kzHڶ&uz=gʕ⻂OT*No9<]o9UR6 S p9gBu0d^[̽"OBr7Bvs(n?ϖ`& b@ K:tBѳEbWbF&㔏Μo)vҶ&H6(_\AlE8Jh¹R|=Vj2Jʜxg&ʃuw aD'`CZS*m|CQ| 5G` 竾SЀ~oo-9՘ڙj9#XMG7..uj7=c]aIX UHW7 V,N VfGnېИcpyv]USq|/´b?zQi_`2x?*UZ4 uF X(U zɶ6sAv7^2`&3IPzM;0̣!v\25s"騉ذQ b#`EؾeՔF!s) CS2Q'PֹXBH %OmmWArk%q`K;ض?>Q#mwjU .s߼"ƥ]LMJ76D͝*pK(.{tf" s˫)$UQ6@8pdI/Y,_qAz($v$ |[O8f5=ydG~lk[jsn 1G?PP>sRZA̛0e8 waOM6IZH@8KI&&\,)q kՏغ=%=iA^[*4vh葢hN$Fݿ{*q,Nv2m%2;{1\t עK{NT7}}hoy%!7e֟`2CZo?m8lJKQoG75n- Wk_NC} &ٰjFn;7˂[(+"BK1>aU ˎ#͓;O pdbs`/bQ8NMD]cǎbrb*/WZŒpJ`ֻg}.t,+?,xc.da|귪ġO`N`CdB2k)g}<ˋ, gy]!{SR}lT> 'K+b+Im]_a{#^_\$5{B]CpX|.S)%UԜ ?<^nZb/+֨U;،}?#BGj>琅8 _Rf3&cE$4э_;qh;f4Ѵ@#;[ЄDC%OJ8زT M E8wosċ/)SC<9Eѡ%s@/x@+o6= 9 zSeU,?̒mKx!ĉn_OZW88yɬmͧyU&W2ٮt}xb;gp*D 1%WeУ;$nƟz) UmR2:y'|UtQy(52݄xQ Lw^YF̯%Dž8x:EXcF4FI>MR`iî՘Lvc)[SAnYXk ~fﾒMT"hǔ;Ȍe0G<=y 3Pc,:`fU0ܠ;b-4`Zgdh=ϹS;ˤ XwL)/ٝhi7,|amC5i踰oB~krCn :>Wj'捁K69>+̝8dJQFy4R=t2{yͥV,-/ zl+((F} "%!ʍ}RHiK-8lq$ uJ2$LZF6TWI<5QB " =~~<98bqOSk/5!!=}Gfk%iv|cI Pz6ր ъ6;;ZA=s*Gr sD;$׹eDF 3a߈=@XZX I,T\3/b[C!Dk2؅ބ!񰝈ƶnJ(_7#{DM81Ԃ!Fֳ )?*=[sv >_grxXmn`"}v̓ĻSE4)!PDIHV.GӠBPWpIL1SbQz{#*i +gR HÅ\9́@wŗ)~mc `> Nv$&:[ ܈b`Z[ F'Ar!OՒ Y<46k ˑr] ]z~h  8ޱ[ޘG,vUV0ރ tbJH0YT'/["lM/ Mse-dy슲_-tAt!}ƒ؍n'bWQ'#IB,W^6c r+FVZxy=3$_G4ohr \PZzU!~zRVv ʲ$iR);/vI8ɚ4^ 0ܾg/C9l#CȰrhr}- Xw돼mzj6k,4m Kt ai.d\2b|L9k6ml wW>`+pg{;U]~*iE9fB"J*yCRQX\ug{%a>z.V.gXhC\<1+㭟0Ao%öLTF/wȆ ,Ƕ5 r fG7[ C?<Q<dsܬ es=ŶV2a<dѲrfz2wOdP$f$VBŇ߾,~|%].('=$ȥ b% "nHÆ|8(\,X`X?-aӀ\P=$Ǩ2鷮Уm, f!4''E)q! )]e.Y(+![=XrstO 0#>(0] b┩^Ѷ؊^?hST~ ;j.šMN*p4q&q 5pS%{0ho*FiF)hd/&JZ럔@._&C( N}Բ7IC<(da4ِT~3nz5z1E5da7)f;'Z ^٢M7 ?GtW*5LKS^8eiݭ~.4 C{ *7w@֍U` v}]2 :G /J^rq鐑 R0CwBά(&0QeS?;z!g* h[Dc"v9&X|:!&%eqoUz/5Oc9S=7 fJW?'8?k.i{ƻthc Rl`l*xf6V3 ^؂O!" 0Q~@G\e;fZْދ_Iv5TT..z COhtA.mq> E5")!3l+cֹN,/?H >  F.LK'ebOuPϼ',ceK @5= B&YoBN .07*]ak:T˳(ABabG-ea65X}ِ0~G-qѡp eU6k],Gi/!5Q̘"e7zOCy](*i۔(_RR4/Unp25]Tuvz OՈ)SXem%RRPPR(ʸFr= dw[IZzbv+Q*gD䈮3($x+HB@8*DŽ.!G'i!W 6 E àGfT4g(]a.ʗafYw|*[c=P!sW);Ͽ1}6i%M!5!w&L8aOFX^'Pw*an9c"9 >$Ǒb= K_^mL6En T-Ph1NWJW'_p]b=pG~)Uf|Hw&_3{x9CAͯN4v}-z y) B8c_T=Oq.6w!aXDf bV8)ɔaGZUV &Z&z'иA\u- }"*L;&!mh"5AYeH,E­vuzw=gE P*AFC=d6m͏[ {} FFͰ´T;Mp\D DLsbF@?.*f&< ɬFj KT"L9OJ}p}[ 2 ^7ݥJvQk=B G1]N`;qcK֕`MKI/pFE#Zҝ&/$dYu*gyC !ڲڢ`UVBywE"Cw^4F@}# }?Zڝ%3\!~&chSNE೯E0~mKNXjP%o |Fk14+Eq[nL i$ } ĐE&OM;숺ɒ/! ˽k]b8G؝g>)ПeHo0 q1ы:r_R9!+xBv>6/ vii/WOy0uEl[qC# !*-R85n/kw/𕜧Us^`"}ބm\V^DvTx ;1ROHn%$hcWzձuARZI2kl˹zmqS}R@8E8Zq')?rp6U&Wo;ɻ(CZL;6< (Ǣ\0cdRjA$;QLԕJOj抌!qꚪP:OYIQ-w|7_O1MW=x',dt\gBWBu~-.2^f oKlkLS[s<Ҟ!Fcr/  ,, }-* p!ϊPh\!1aQq[XR,Ys)iu_]C ӂOZ^t9PCՐA;> >#r/?>?45vƶk1 i$j|A>:O´' ".&lC䰑o|a *<@mZA&|&~`JogVN3Ɂ}sm `R v&Bbf10}eI3*@s (,|Z|j2n~5ۡ+[|ª(lGKjG ѹ->\-Љ{8ҽ-qCR;&lCnvY5Z9gsc7>]iDcjzm/ [,DÁ%ܤY#s(z_6 9: *g9OKBdj/ؒkBc"zҾ`ۭ}g# >JLZW*ׂflW;^E~bQX-=`lco髁G4L7Nh]s[ՔӟfH}N;M+`;~'g:9 -PY֝< ZUL؟hlմEӤǜ(U =JuUo)YHu.lS&ܻk ~`fV l!,.>aN;Wqﻄ+A2sp ><dwQH:G>m3pyA}o ];,e ʗx ܶW-WrRI?:DχVv0=l6 3?ZnlMb%gcblgiģ{٤}mD§8 "#G!EGѩC5]RWL:;Fg;[XzxYx+a܏ Q@{LvnqhöNAMlĄ5;=pvu])ܠ}1&uɰlAYBcPDܒ3+uWSnvmYqfJH Il<ۖ!Mƚ%"0u :OCy9jt;-wq.>M ;<>SwdKibٗ>|:yAkT-O|}k+ r]a"~\s";Ci`M=[4 l2z%5"m|{pN>]ZMâw}/ 8?K{<2>!yp-lsW:;^1&4J4Sas߲S7Dq3_U~w(O ~_D x&m2́  ԫ'`y:o$%[ G5ҟ90B,lCerc)S[/>mվeֆM\F٫X^ =rfwlrKӴ U-YF5[93jrMb|3 EsvATD1u)]kցI~: 0}#7u"|c/, xXUN;Dyzs4QR$i_iFƁ95{|H62!W#3*z7&(H39AQ-w.5-3?{3\R%t^ez4ME#<V_RIX;#Yo줲O079(.'TrFo>.o16?iAwNq Bgy"J#)J:Z`dcJ,EdjƠ=„X K4r絰}Ƕw&Wqew )ૄ`@B)Wyq GUkb͒.BCXʕ;f9+ydl`Hf-O$mDŽ9Ésq-0lO2(@U2$6m4򛍻13S^in '-3D!ABIXޞ83~:!F{|W"$J,Oк=!\/#Ɓmhe)78ةWX<My焇noA s$* c9$cRtۡxs0GRW*vEa(BёOYɧ{xWt`{_,Qa`F認c'm{Ш އg }~%Ϝ$/@J &JK q&l;~J?F˺L(Xzn!VhCoK\w:09kX@\ZO`\G0K) [wd̷(!i<+1i"5m lXf""̓QSS=IXnq1WfY /^ũ Vb?')XCwkgƈEyP iؙKM 4jncDE|,(ɉlgLcpa.- X2CK`Da7ۋVY["b 뛐d,Єd؅*Kkak1P4) '(K-TMv(UUvsH٣,:t+5br˧NxF/:MM/V'D,@Rp_&3 l]YT$7 D* $s̪O4*K-~R{%*?;d 7ysF9h2P ,ԑN`44|YWIm3[镃\dh/:KD΢cχC"7Ypmr`N+E^صtfBx(* M3EMz,Q(F'ӾzzzPo: ;6jq0Y+N/^?,tc0t9[ (h"FA,LqQ(Z/WxmVL#ZOsBQd! akd~'0F6Wk W0#:m5nI5A&"|$nI˯ _)woV2&+8{}-3H^ڔȤ8G5'es)Ŝp\Egu /qb="޽^)W=;F<Km"IBՎA[U;* /S@GyJ}ܷC,䌴gƬ7 ˁC2Z0/LFG5(.5OYOk7#kAqFٻ3I1Ia;XEfORwG;URR&;QBсÅBܖETw|?%G35eo%N}ӆx.jguwtR2!tIXN'WziXԮz!4ٵ_Fύ$Aċq!qb[UFdhDJHz&Hl5}ecMk}#ű&u7ZJވ`Ke(}8~-D/|1V6uq% fk<6|7~ nrS2QY,R־ ؓf m\5zK勘"t *}kSWNC<,A{C í gdvknh@[{*vWkVo-h 1ɬ(9Xiw@*yݻri5.ilU,n Iҷ$9p5mBWqN?mx8"uNNJZDH}[E&Lj)$;6xZ/LF6$t+3i8"p~X֣AP_hnE(W۞HIHCB蔑V[c½ubKt2kcAZ;)MQ!0-uNލAoV~ GXgi$Ӝ= S\:S2%e3& j1!ԼzH?-ȿXZ%&{ (;g\}#);hB}k 8;6Rp"ޯF{'gi 6QYyg\ma rM]R//a!HYwYR{a[y'e"7`EJ'lk\8•DL.СZnAYkƺb`,%uK D6/  дˏOIު%JdYs=hh> EI44 Nǖ 0ab3O#%nж r#}^ ^[PUQeDD/L4CZ2 [+XM% N=0\FcrZ?7\fA5Hgh\QY^s9 dv ܆V!"EȊ.%-zͨivH7/`&"Ş P_sP;Lm{hDr:b[υ{OQG_W {%INMPz.ƶD(#*?M (H(*3M]gw&՝!i%ImʨŒz ò,^2yG\Dz V:w^&v0uyF\ڜC>ia_@] 6a~9yb%.~_HɟTA. eFgIҖ$9(rrU>B4yoԦ|^ə=.TJe^9H8hdt Y9Ʌ1! ;*e;Ԧø%V 2NqA\-ZBsg2n]%u>6 )-S U;+k!`?b!wbƼ23sDФlғeYhp.-Wg`?-r\.TO|2(42;UvpF|cIћz`B$s8)0>Rgu}'TiR|늶焜YЀaZ}B)d F% (kZue'J , ly-CT^_7Sɇ>FJ%ő>4u+3$L˥G>4(8lj6uM$,*A'aZU4[]oenVY{ .v,,[PE!(Gî Yk>([ r;p%ԥLbVV6miȗßfʂǹUѠR_OߜĤ{. Du:-2g=0>ǡf&I]\;t[# ?ZzcWٗ9\0mxmvTø>DŽQ*4TcQI{]9@@FȦn|P9vvvl֎-YZb0ʃ)y~)Yȳ| ?& 5B9{qsc P'-A~j~Sw/Q\\!v^3sL#S;(Rq[ 8YfPuqa+䍯KzYl@pO(JfOY͏ssN.q~Yp9j8U'zЌ6⶛ "h4""Sܤ sHxGbZ(x$R=Pɇ$&,x+2þ0>zܻx\qE)J~|Pz(Я12$}`OBZ>߾/[MU 09NE추S_Ůc) qcVbZk]G .|mieݜCeL] w,v p/;ɮBDB_ z:yzXxIȤrsxȺt`WGYj ynMyxYG*r Pc C %劣xI p}&Nnr0FVsjd.`Bfk8x B= 0R R\Ӳ1NM[KOM221yCoB 6ąi~NY-"UH,yѷԫ$hVPZ)nV ňe{;$8 ~5*/(PPmݤX=Je=]ۗC y@Cs8ıWsԺkU+ Wч  PHmԈr|Z-:sS}>W'ElZVʫ4>#MduP ;B5Ρ?FM&<;c 0_&|.ZiWmO\^]9K֬E҄>Isy>]ҋ.9wNXĨ6%AZ)SzC$RR~M.YfuT l2+#h L7]炋TySQC0( θ.:1zW5 `+2=  H5b%b & l452IF7h;u[PIE F>Q zrzt\ΊL-9YeHdh ]xuZ+/VH_>`=2pB>i2?E#++0<, % D;U0uuaaILDɧN/hCKdd{A:ڑxPvXNѰXXb\V" B3PJiȺ}2FW'(Ku1Abp*lu&npnJAx3q"P<ȰFY`{B`-E%.q s^FJ*&]֟=h?etx1<5EW;$0hXԏ{H0O`7 :kfʷu9(ЬF;X'?#e!ܛ!) |tj>OC|:Vy).9"4YTR`M%d-ؖ,+uEq =vg@&{S8w]4 !8Vn>j>݈1`E"$IqP৙7JkV[H.J&\G`@^dA7(l2O5m5Uo$_mExtoFih:XF>ǿmW)~Uki\K+92nvIо[˂e؟sMy7K?#E@? uc4܅M(xA<>f[|$u/}묋QCǦQ:ax$)Ks_ u̠3a{KNԋEѭLߔ"i_'*s걚L6}u;8 $idbYf\% H)hVk.5`;Q\wUt ( i:WJ"_G%Cr!^:C.DBLZYuE|?v*FJj;p_HAw[CopY!fCStAQRӕ\+CƅOPg yC@W.})}_f(8p6?H2އ0U/*عɻ`}se\ (c]{p(o5ǰwK.B Dk Ʉ7 /dRb&ЖB̝생!o(D褦6iJYMnvKZL!u3wX kӒsR$qfۼ1Kl~Q$X\2f7xaki!RlxYaH*9a9(ꤧ߱OaB%EZbFI8o9wi# yoq;p_R)$D-_=ݳ5:oqd?nX30O\tyekR*sZҔH&78pcK,4'o| w.5\Mq=tEUO^8[N:Az@;r?d DPsO J=FlEoK6TہYlpk٘ŠB-3,}AlYk?eCƋXt2ߠSd)U8js0-( VlА6Ql-M/|z%)O$d>IEMՔT9GP(e|#oY Lv.K%F-EID1+#l"\UQpP MtG9J> Ԯ4-jOY}mE\t'MdR-11Ծ9~(}}ߋ &6nYo/i?՗$_UA}K1 +AZA{Kg%΃LYHAЁP9@+v=5?pQ;qT($2EET:=dbg[JtيIv0i9ݨKkqoVNW|ςf:y6/A h0Ýq O(w06wew^ޭ'A6"э':|ZAu{scB> E@X]hkF3UX#>j;::Ģi9nw,pP╰~oz&<'%+:zE\`I^JO*c젆bGUDnwAy9$?B3%a@6 H;-MUE8=nĄu4zDnNX\{lRlv:-|K3bp,Q4&m0/xW(5"2*t/Z,|5N,|^ 'IxNM d*sKTacu8:z;114Hk]ω_|\8\Ɣ4U[WfD'hz=h'МAz$J!_:{&^ { tG5}APgMňl,fUg8cĖ=(` |0ɉEVlC2U" 3W\ܡu_U=Cƭ-c(j<9ϔUVScS1R0[}8W1  3],AfݛA?L:~%/"E `«H 5##@3a޳ۥbDVwhYE][Y`V3JZc8YLaH MFPꙘ{4p쁂) VBO##F1ӧ'Uf6PH';텤Cp؉ gzjfƕPov%~V=P{U{IP~g #EϱaG􄭀|ը2:V0 {T)]*FLWLĨOx .YeӞ- N3 g]8Bt M>c>TkH{б){q6Bb  w&6TY4)h|UkgSV}"%bΝeӵ~!FhG}*ܖ(iS8[:"ߓ}j+ַ.?/EN=:ҕ,0+gYmUč1$i܌°u:X+x怈Pj%`{TFDYWq\Ԑ^K[Sc)&iX-ؒ]{>gtƄ]LTvA+dxH|W.9CW4)Gcl5O"Oq@18a!_ϥqe[L.Nc (ґ lavaU;8,s*berlu)E΢ě@s_R|M7osrhNFb>s0N|dq >XMLw~GAG"c21]/ccyeeĕ5 z۝i7~t!C>JMWTͱAƂY;NUb?GLCtGP!eW.j^R2!͡ a9HO/t.D6zJo2*&?#"GELY*G/y)a#>7U6 <# @{L "I^P5i[ wC?W'__aٔ׽<HW V4_i*fg<$*k=3BaKXX ~8/ArUL?ʬ돢>2uKoNzͩb[no$$kDAa$8҇?IWݭQαwZa#R,NpI<ȊNekJ=rgE?~-3>W>wd&ɄbakR~šy2,f?#GKuaѸtno!I3;{ŖGk:6,_(ٙ漠 ?v;(?,68?]`KRy hbRC f8_5D 7yc `?,uO!7^)EN 2& "Q{l- ˿7si?Ϲu:o#ς$ʖݕ3hg6quRhXQ_1}3{ Oi2b+Q~V~q(EM+x4ȤfMNSAzL600ObuGN,5tGtUgȲLY7{~w~Kj$Jrh.s р#~+w#wøƓDkUfاDzr[Y/k/% uN\-VTwH޺&`K <LLk:H/< gήh3}_0.5!BM*2S&. "ceoڌSd̃)lD\$88fx0ARz`/Arࣂܧ p4kd;̜~ 1*wzѪ75'U.d* @oWvح NP;1vۇ16J38Ym0dݹJZJ(2!ױS37pz]"cejÊRnvSG=2h:TC͜1:h+z[W!O9% Rs\I'3J˞] KL\5 δd|Уl:mp,Xڈ,j4RQo ZSeYv^)2;g%`tE\kߨjA_QgUaÀ-U:qq҃Nllʳ*"mл;_W[]tY-t=HW5jk1N `T_X[+A|{F!##x\![Q”+M=(`?n9(NZKBط3(I=|>?6{>DQ0ef <|IM']^ऐ52e bWLU,(;]$Qgum8a'xk"fЋO jNY X*#Zq3S-~. $ 34>8?=ͳ1x\ ±Ɍ[h# X@tWhGv`ÿaj“!;ڰMO%¸*cKnxθ":{Xrsh2h A*&ݯa>= vL:!xMGܼf0I W)\? @ؗ8 em%fI_'Ԭ:[ 5z^={p<:Y/nq9! '-ѝ3ؚjYgOļt{AyBmS"-8)-Q\u_a`)0xDvGb"~ȼb( v]'=wKzD@X^{/WEl؄zi1d1ϙd9F5Sܷ{%,&Ykqvl㗅yy? :1[!G/pHf] [&ؾ/ H JKM [h[o|!fmMv0Z̮΋' ֭V+GLw7+_ߠ*t#Ľ]Tw#\!'_M2W%1^nsC\MU%Mbj) [U>e/st%-9jS[#A~Vj CO$1ZM52]} ?;Jc9@uԺ5m`yTKܡeDpvGiʮkw+m40~~e,b`ɠgrEX o1TNn)L Kl@ܿPE*1G-PCz#`a*OK ߢFbWsdMOEޝK%zUרF4j\4)Ʉ.R ɞi}'aJ/st@PI?k(Ɵb3pM.U.%˻RZxdDCfЌ#lMiGHo]6oó줜MIo覕s6{pR^"__hm;ah 9 x$)*E &J8ja X7z7!Pf%JkZY9 r~c̏'r!ZӈkFqf5. X ~_ES~%={eun7(BO:mpod nUa 1"t0$%.cNQTMR%-DKr7EȮbL-,RNʀC}!|[aLcگp\d Q !] ~leZ Sl4#&L{ѻG/1L\.s1ġC++h3mӣF/nux6a 4b;%| Pz^6 k4'sҏkHfS_ x9 ||g , PzU=>Od',B{H NqH\C,߾XΩS3uV8\XVDsґPKwEJiMadtZfy*68iv/M)L'nG#otƘдZaT3HO O7բ4sgt:E&wr H9dSb~:"\)CGL bMC{k ԑT&rG3Vq{ _txLuI8TQt[p`\0/YUUoZmz>wD5CDNHx s[eP4J58c3&hIWއm_M /)ֈ, ?~:EvMiK'mO䕼"#\OG5<8$4WYymwІ,^zyBɳtն G c1V]Ʒbu|'ݩjvRE= e+Ob+&Adڲ:(yھ~)0__B4_g@̐8sB@?ywiJc`t~imf+4:] M텽:_]%z6Y+Nd5zo+IXsml-^@E\d32B݈6H0ЛZ YZ