From rdd@cert.org Sun Feb 2 18:21:44 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B07F41A0159 for ; Sun, 2 Feb 2014 18:21:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, J_CHICKENPOX_26=0.6, J_CHICKENPOX_57=0.6, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DXJH9qGn-U8A for ; Sun, 2 Feb 2014 18:21:40 -0800 (PST) Received: from plainfield.sei.cmu.edu (plainfield.sei.cmu.edu [192.58.107.45]) by ietfa.amsl.com (Postfix) with ESMTP id CA9E41A014F for ; Sun, 2 Feb 2014 18:21:39 -0800 (PST) Received: from timber.sei.cmu.edu (timber.sei.cmu.edu [10.64.21.23]) by plainfield.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s132LCY6019499; Sun, 2 Feb 2014 21:21:12 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1391394072; bh=MvcVjpkepHEM0KofPuGyjevKicsRGTX5HHGvltOO0RA=; h=From:To:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:MIME-Version:Sender:Reply-To:Cc; b=fZMH/Dq8pWt6wPQeuMnyr3yKbcW8ntCBMQQrxPUwjgRX8MK+jenrFf6XCK7d8U1on Nt7m+KLBIl7LOR8jhD7sA2hmSGt98k32STJFjqRrqiYDicare2LhQKYyjTst88/zeA F9FX5EynoGm9b7j2BPCHotkMd5oBUO7o264bHENY= Received: from CASCADE.ad.sei.cmu.edu (cascade.sei.cmu.edu [10.64.28.248]) by timber.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s132LBaH026207; Sun, 2 Feb 2014 21:21:11 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.02.0347.000; Sun, 2 Feb 2014 21:21:11 -0500 From: "Roman D. Danyliw" To: "Panos Kampanakis (pkampana)" , "'Moriarty, Kathleen'" , "mile@ietf.org" Thread-Topic: [mile] Documenting DomainData Thread-Index: AQHPFeZKcVHy8XjkSUe8d5nwrbpqVpqOITGAgAAOhgCABB0RoIAAFI3ggAHKzCCAADjHoIAOdveQ Date: Mon, 3 Feb 2014 02:21:11 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC54C2C29D@marathon> References: <359EC4B99E040048A7131E0F4E113AFC54C1665C@marathon> <359EC4B99E040048A7131E0F4E113AFC54C18CF6@marathon> <359EC4B99E040048A7131E0F4E113AFC54C1D3AA@marathon> <1C9F17D1873AFA47A969C4DD98F98A750FAB17FA@xmb-rcd-x10.cisco.com> <359EC4B99E040048A7131E0F4E113AFC54C1FF19@marathon> <1C9F17D1873AFA47A969C4DD98F98A750FAB2C72@xmb-rcd-x10.cisco.com> In-Reply-To: <1C9F17D1873AFA47A969C4DD98F98A750FAB2C72@xmb-rcd-x10.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: multipart/alternative; boundary="_000_359EC4B99E040048A7131E0F4E113AFC54C2C29Dmarathon_" MIME-Version: 1.0 Subject: Re: [mile] Documenting DomainData X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Feb 2014 02:21:44 -0000 --_000_359EC4B99E040048A7131E0F4E113AFC54C2C29Dmarathon_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Panos, et al! Regardless of format, we need to document every record type listed in @Reco= rdType to enumerate which fields from this record type will be supported, w= hat representation will be used to store the field, and an appropriate RFC = citation. To the larger group, do we want a colon separated list, or since the data m= odel is implemented in XML, individual classes to represent the fields (e.g= ., ApplicationHeaderType)? Roman From: Panos Kampanakis (pkampana) [mailto:pkampana@cisco.com] Sent: Friday, January 24, 2014 4:18 PM To: Roman D. Danyliw; 'Moriarty, Kathleen'; mile@ietf.org Subject: RE: [mile] Documenting DomainData I see your point now. Yes, we need to be as specific as possible. We can format them using colons as separators as you used in your example f= ollowing a simple pattern. It can be :< TTL>::< Data> The type is dictated by the RelatedDNS attribute and the class should be as= sumed as IN. Panos From: Roman D. Danyliw [mailto:rdd@cert.org] Sent: Friday, January 24, 2014 1:03 PM To: Panos Kampanakis (pkampana); 'Moriarty, Kathleen'; mile@ietf.org Subject: RE: [mile] Documenting DomainData Hello! I concur that RelatedDNS contains related DNS records for the domain listed= in DomainData/Name. However, I don't think we can be vague in describing = the format of RelatedDNS. The example shared by Kathleen's had the following example of a MX record. evildave.com MX prefernce =3D 10, mail = exchanger =3D mail1.evildave.com I can infer the format. However, without the draft providing guidance, the= following could have also have been acceptable (replacing evildave.com for= example.com): mail1.org1.example.com org1.example.com 4000 IN MX 10 mail1.org1.exa= mple.com org1.example.com mail1.org1.example.com @org1.example.com:10.1.2.3:mail1.org1.example= .com:0:86400:329832:0 I feel that we need to provide implementers unambiguous guidance if we expe= ct them to parse the field. Roman From: Panos Kampanakis (pkampana) [mailto:pkampana@cisco.com] Sent: Thursday, January 23, 2014 9:28 AM To: Roman D. Danyliw; 'Moriarty, Kathleen'; mile@ietf.org Subject: RE: [mile] Documenting DomainData I think text that says "The RelatedDNS record contain DNS records (i.e. MX,= A) that are related to the domain described in its parent DomainData class= . For example, in DomainData class for domain example.com, the RelatedDNS r= ecord could be carrying the MX record for example.com." would suffice. Panos From: Roman D. Danyliw [mailto:rdd@cert.org] Sent: Thursday, January 23, 2014 8:20 AM To: 'Moriarty, Kathleen'; mile@ietf.org Cc: Panos Kampanakis (pkampana) Subject: RE: [mile] Documenting DomainData Hi Kathleen! The example was very helpful. Thank you. For discussion purposes on the list, here is a relevant excerpt from the pr= eviously attached file: evildave.com 2013-01-04T09:10:24+00:00 evildave.com MX prefernce =3D 10, mail = exchanger =3D mail1.evildave.com mail1.evildave.com internet address =3D = 176.157.32.17 zuesevil.com. IN TXT \"v=3Dspf1 a mx -= all\" Reading this particular example, I understand what information is being pas= sed along in the DNS record. Where I need help is how do we formally descr= ibe this format for the draft. Roman From: Moriarty, Kathleen [mailto:kathleen.moriarty@emc.com] Sent: Wednesday, January 22, 2014 6:50 PM To: Roman D. Danyliw; mile@ietf.org Cc: 'Panos Kampanakis (pkampana)' (pkampana@cisco.com) Subject: RE: [mile] Documenting DomainData Hi Roman, I was able to dig up an example from the group that was proposing the addit= ion of RelatedDNS to the DomainData class that was added from RFC5901. Pan= os may have other examples planned for the IODEF Guidance document. I think as long as the data of other records can be included, the intent wi= ll be met for the requestors. See the attached example and I am sure a pro= posal that alters it, but provides the ability to include that information = would be fine. Anyone else? Thanks, Kathleen From: Roman D. Danyliw [mailto:rdd@cert.org] Sent: Monday, January 20, 2014 5:04 PM To: Moriarty, Kathleen; mile@ietf.org Subject: RE: [mile] Documenting DomainData Hello! Understood on #1 and #3. I still need a little more clarification on your = answer to question #2, "RelatedDNS lets you add any record type to expand o= ut what is possible from the Domain data class. You can also list what typ= e of record you are including." To restate, RelatedDNS represents DNS reco= rds for a domain specified in DomainData/Name? If so, what exactly goes in= to the element content of RelatedDNS which is defined as xs:string? For ex= ample, if I had an AXFR record () how would= this be encoded? Since Node/DomainData/DateDomainWasChecked represents when Node/DomainData/= Name was resolved (where the IP address is stored in Node/Address), is ther= e a similar construct for these other record types in RelatedDNS? Roman From: Moriarty, Kathleen [mailto:kathleen.moriarty@emc.com] Sent: Monday, January 20, 2014 8:48 AM To: Roman D. Danyliw; mile@ietf.org Subject: RE: [mile] Documenting DomainData Hi Roman, #1 I thought the answer was yes, but it would be good to hear if anyone thi= nks it is too much detail now. #2 RelatedDNS lets you add any record type to expand out what is possible f= rom the Domain data class. You can also list what type of record you are i= ncluding. #3 I don't think there is a concern in adjusting the names for consistency. Thanks, Kathleen From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Roman D. Danyliw Sent: Friday, January 17, 2014 9:32 PM To: mile@ietf.org Subject: [mile] Documenting DomainData Hello! Since being copied from RFC5901 into 5070bis, DomainData has evolved. Curr= ently the two definition differ as follows: ** 5070bis added DomainData@{indicator-uid, indicator-set-id} ** 5070bis added DomainData/RelatedDNS ** 5070bis uses iodef:Contact for DomainData/DomainContacts/Contact instead= of phish:Contact which added classes and attributes to Contact A few questions: (1) Since bits and pieces were added and modified in the cut-and-paste from= 5901, is there agreement that we don't need to remove anything from Domain= Data? Do we want to represent this level of detail in the core IODEF data = model? (2) RelatedDNS was added to DomainData and is not present in RFC5901. Ther= e is no descriptive text. Could someone shed light on the purpose of this = class. (3) The attributes DomainData@{SystemStatus, DomainStatus} and RelatedDNS@R= ecordType don't follow the naming convention of lower case names separated = by a hyphen. As in other cases where classes have been moved, I would be i= nclined to rename the attributes. Any concern in doing that? Roman --_000_359EC4B99E040048A7131E0F4E113AFC54C2C29Dmarathon_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Panos, et al!<= /o:p>

 

Regardless of format, = we need to document every record type listed in @RecordType to enumerate wh= ich fields from this record type will be supported, what representation wil= l be used to store the field, and an appropriate RFC citation.

 

To the larger group, d= o we want a colon separated list, or since the data model is implemented in= XML, individual classes to represent the fields (e.g.,  ApplicationHe= aderType)?

 

Roman

 

From: Panos Ka= mpanakis (pkampana) [mailto:pkampana@cisco.com]
Sent: Friday, January 24, 2014 4:18 PM
To: Roman D. Danyliw; 'Moriarty, Kathleen'; mile@ietf.org
Subject: RE: [mile] Documenting DomainData

 

I see your point now. = Yes, we need to be as specific as possible.

 

We can format them usi= ng colons as separators as you used in your example following a simple patt= ern.  It can be

 

<owner>:<<= /span> TTL>:<MX Level>:< Data>=

 

The type is dictated b= y the RelatedDNS attribute and the class should be assumed as IN.

 

Panos

 

 

 

From: Roman D.= Danyliw [mailto:rdd@cert.org]
Sent: Friday, January 24, 2014 1:03 PM
To: Panos Kampanakis (pkampana); 'Moriarty, Kathleen'; mile@ietf.org
Subject: RE: [mile] Documenting DomainData

 

Hello!

 

I concur that RelatedD= NS contains related DNS records for the domain listed in DomainData/Name.&n= bsp; However, I don’t think we can be vague in describing the format = of RelatedDNS.

 

The example shared by = Kathleen’s had the following example of a MX record.

 

<iodef:RelatedDNS R= ecordType=3D"MX">evildave.com MX prefernce =3D 10, mail exchan= ger =3D mail1.evildave.com</iodef:RelatedDNS>

 

I can infer the format= .  However, without the draft providing guidance, the following could = have also have been acceptable (replacing evildave.com for example.com):

 

<RelatedDNS RecordT= ype=3D"MX">mail1.org1.example.com</RelatedDNS>

<RelatedDNS RecordT= ype=3D"MX">org1.example.com 4000 IN MX 10 mail1.org1.example.c= om</RelatedDNS>

<RelatedDNS RecordT= ype=3D"MX">org1.example.com mail1.org1.example.com</Related= DNS>

<RelatedDNS RecordT= ype=3D"MX">@org1.example.com:10.1.2.3:mail1.org1.example.com:0= :86400:329832:0</RelatedDNS>

 

I feel that we need to= provide implementers unambiguous guidance if we expect them to parse the f= ield.

 

Roman

 

From: Panos Ka= mpanakis (pkampana) [mailto:pkampana@= cisco.com]
Sent: Thursday, January 23, 2014 9:28 AM
To: Roman D. Danyliw; 'Moriarty, Kathleen'; mile@ietf.org
Subject: RE: [mile] Documenting DomainData

 

I think text that says= “The RelatedDNS record contain DNS records (i.e. MX, A) that are rel= ated to the domain described in its parent DomainData class. For example, i= n DomainData class for domain example.com, the RelatedDNS record could be carrying the MX record for example.com.R= 21; would suffice.

Panos

 

From: Roman D.= Danyliw [mailto:rdd@cert.org]
Sent: Thursday, January 23, 2014 8:20 AM
To: 'Moriarty, Kathleen'; mile@ietf= .org
Cc: Panos Kampanakis (pkampana)
Subject: RE: [mile] Documenting DomainData

 

Hi Kathleen!

 

The example was very h= elpful.  Thank you.

 

For discussion purpose= s on the list, here is a relevant excerpt from the previously attached file= :

<iodef:DomainData&g= t;

<iodef:Name>evil= dave.com</iodef:Name>

<iodef:DateDomainWa= sChecked>2013-01-04T09:10:24+00:00</iodef:DateDomainWasChecked>= ;

<iodef:RelatedDNS R= ecordType=3D"MX">evildave.com MX prefernce =3D 10, mail exchan= ger =3D mail1.evildave.com</iodef:RelatedDNS>

<iodef:RelatedDNS R= ecordType=3D"A">mail1.evildave.com internet address =3D 176.15= 7.32.17</iodef:RelatedDNS>

<iodef:RelatedDNS R= ecordType=3D"SPF">zuesevil.com. IN TXT \"v=3Dspf1 a mx &#= 8211;all\"</iodef:RelatedDNS>

</iodef:DomainData&= gt;

 

Reading this particula= r example, I understand what information is being passed along in the DNS r= ecord.  Where I need help is how do we formally describe this format f= or the draft. 

 

Roman

 

From: Moriarty= , Kathleen [mailto:kathleen.mo= riarty@emc.com]
Sent: Wednesday, January 22, 2014 6:50 PM
To: Roman D. Danyliw; mile@ietf.org=
Cc: 'Panos Kampanakis (pkampana)' (pkampana@cisco.com)
Subject: RE: [mile] Documenting DomainData

 

Hi Roman,

 

I was able to dig up a= n example from the group that was proposing the addition of RelatedDNS to t= he DomainData class that was added from RFC5901.  Panos may have other= examples planned for the IODEF Guidance document.

 

I think as long as the= data of other records can be included, the intent will be met for the requ= estors.  See the attached example and I am sure a proposal that alters= it, but provides the ability to include that information would be fine.

 

Anyone else?

 

Thanks,

Kathleen

 

 

From: Roman D.= Danyliw [mailto:rdd@cert.org]
Sent: Monday, January 20, 2014 5:04 PM
To: Moriarty, Kathleen; mile@ietf.o= rg
Subject: RE: [mile] Documenting DomainData

 

Hello!

 

Understood on #1 and #= 3.  I still need a little more clarification on your answer to questio= n #2, “RelatedDNS lets you add any record type to expand out what is = possible from the Domain data class.  You can also list what type of record you are including.”  To restate, Relat= edDNS represents DNS records for a domain specified in DomainData/Name?&nbs= p; If so, what exactly goes into the element content of RelatedDNS which is= defined as xs:string?  For example, if I had an AXFR record (<RelatedDNS RecordType=3D”AXRF”>) how would= this be encoded?

 

Since Node/DomainData/= DateDomainWasChecked represents when Node/DomainData/Name was resolved (whe= re the IP address is stored in Node/Address), is there a similar construct = for these other record types in RelatedDNS?

 

Roman

 

From: Moriarty= , Kathleen [mailto:kathleen.mo= riarty@emc.com]
Sent: Monday, January 20, 2014 8:48 AM
To: Roman D. Danyliw; mile@ietf.org=
Subject: RE: [mile] Documenting DomainData

 

Hi Roman,

 

#1 I thought the answe= r was yes, but it would be good to hear if anyone thinks it is too much det= ail now.

 

#2 RelatedDNS lets you= add any record type to expand out what is possible from the Domain data cl= ass.  You can also list what type of record you are including.

 

#3 I don’t think= there is a concern in adjusting the names for consistency.

 

Thanks,

Kathleen

 

From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Roman D. Danyliw
Sent: Friday, January 17, 2014 9:32 PM
To: mile@ietf.org
Subject: [mile] Documenting DomainData

 

Hello!

 

Since being copied from RFC5901 into 5070bis, Domain= Data has evolved.  Currently the two definition differ as follows:

 

** 5070bis added DomainData@{indicator-uid, indicato= r-set-id}

** 5070bis added DomainData/RelatedDNS

** 5070bis uses iodef:Contact for DomainData/DomainC= ontacts/Contact instead of phish:Contact which added classes and attributes= to Contact

 

A few questions:

 

(1) Since bits and pieces were added and modified in= the cut-and-paste from 5901, is there agreement that we don’t need t= o remove anything from DomainData?  Do we want to represent this level= of detail in the core IODEF data model?

 

(2) RelatedDNS was added to DomainData and is not pr= esent in RFC5901.  There is no descriptive text.  Could someone s= hed light on the purpose of this class.

 

(3) The attributes DomainData@{SystemStatus, DomainS= tatus} and RelatedDNS@RecordType don't follow the naming convention of lowe= r case names separated by a hyphen.  As in other cases where classes h= ave been moved, I would be inclined to rename the attributes.  Any concern in doing that?

 

Roman

--_000_359EC4B99E040048A7131E0F4E113AFC54C2C29Dmarathon_-- From david.waltermire@nist.gov Wed Feb 5 13:43:54 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 665561A002B for ; Wed, 5 Feb 2014 13:43:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kDYrPugYwqBn for ; Wed, 5 Feb 2014 13:43:49 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1blp0187.outbound.protection.outlook.com [207.46.163.187]) by ietfa.amsl.com (Postfix) with ESMTP id 04A3D1A0101 for ; Wed, 5 Feb 2014 13:43:48 -0800 (PST) Received: from BLUPR09MB038.namprd09.prod.outlook.com (10.255.211.144) by BLUPR09MB037.namprd09.prod.outlook.com (10.255.211.139) with Microsoft SMTP Server (TLS) id 15.0.868.8; Wed, 5 Feb 2014 21:43:47 +0000 Received: from BLUPR09MB038.namprd09.prod.outlook.com ([169.254.11.127]) by BLUPR09MB038.namprd09.prod.outlook.com ([169.254.11.181]) with mapi id 15.00.0868.013; Wed, 5 Feb 2014 21:43:47 +0000 From: "Waltermire, David A." To: "Moriarty, Kathleen" , "Roman D. Danyliw" , "mile@ietf.org" Thread-Topic: CPE and SWID Thread-Index: Ac8iuuT2GnSM5l/DSiW4GVRSwDSDnA== Date: Wed, 5 Feb 2014 21:43:46 +0000 Message-ID: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [129.6.227.199] x-forefront-prvs: 01136D2D90 x-forefront-antispam-report: SFV:NSPM; SFS:(10009001)(6009001)(189002)(199002)(377454003)(51704005)(13464003)(164054003)(94316002)(2656002)(87936001)(93136001)(54316002)(33646001)(69226001)(74706001)(81816001)(81686001)(74316001)(80976001)(47446002)(87266001)(80022001)(85852003)(31966008)(74502001)(56776001)(81342001)(86362001)(94946001)(81542001)(19580395003)(92566001)(74662001)(83322001)(93516002)(83072002)(76576001)(66066001)(76176001)(65816001)(74876001)(46102001)(4396001)(15202345003)(51856001)(76796001)(77096001)(76786001)(59766001)(77982001)(74366001)(79102001)(85306002)(49866001)(56816005)(76482001)(90146001)(47976001)(50986001)(47736001)(19580405001)(63696002)(53806001)(15975445006)(54356001)(95416001)(24736002); DIR:OUT; SFP:1101; SCL:1; SRVR:BLUPR09MB037; H:BLUPR09MB038.namprd09.prod.outlook.com; CLIP:129.6.227.199; FPR:E20CC114.A42255C0.BAD17D7B.C2E8E94D.204E9; InfoNoRecordsMX:1; A:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov Subject: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Feb 2014 21:43:54 -0000 Changing the subject to reflect the discussion thread. I just saw this message. Here is what I can vouch for as the NIST lead for = these efforts: NIST is continuing to support CPE as it has for the last few years. SCAP an= d a few other efforts are dependent on it, so this is critical. It has not = been defunded. NIST is working with the SWID community to advance the ISO specification ef= forts and to ensure that the necessary implementation guidance for SWID tag= producers and tool consumers is put in place. We see SWID tags as having synergies with the CPE effort. We are looking at= methods to consume SWID tags, as software publishers create them, for use = in auto generating CPEs. This has significant advantages over the current C= PE methodology that largely involves investigating vulnerability reports an= d vendor product pages and documentation to generate CPE names. By generati= ng CPE names in this way we can increase the fidelity and accuracy of the p= roduct data, using less human effort, making product identification informa= tion available as close to the publication of the software as possible. Our long-term plans are to maintain a mapping between SWID and CPE in the N= ational Vulnerability Database. This information does not exist yet, but is= in the planning stages. Such information will provide a transition path fo= r the SCAP community and other that use CPE today to take greater advantage= s of the information that SWID offer including: a more robust product metad= ata model and footprint information including file names, versions, and has= hes. Please let me know if you have any questions. Thanks, Dave > -----Original Message----- > From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Moriarty, Kathleen > Sent: Monday, January 27, 2014 5:40 PM > To: Roman D. Danyliw; mile@ietf.org > Subject: Re: [mile] @user-agent attribute >=20 > CPE isn't funded anymore and may get folded in SWID. I don't have the > latest on this, but would not want to rely on something that may go away.= Is > anyone aware of the latest on CPE? >=20 > Thanks, > Kathleen >=20 > -----Original Message----- > From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Roman D. Danyliw > Sent: Monday, January 27, 2014 3:22 PM > To: mile@ietf.org > Subject: [mile] @user-agent attribute >=20 > Hello! >=20 > The -04 schema of 5070bis has the following comment in the definition of > @user-agent in the Application and OperatingSystem classes. >=20 > [begin comment] > "" > [end comment] >=20 > SoftwareType is the complexType used to define System/Application and > Service/OperatingSystem. Lacking documentation in the text and going onl= y > on the name in the schema, it would appear that this attribute is attempt= ing > to describe the "User-Agent" HTTP field per Section 14.43 of RFC2616. If > there is a broader definition, could someone please talk us through it. >=20 > With the addition of the Service/ApplicationHeader there appear to be two > ways to represent a User-Agent. Consider the following XML snippet below= : >=20 > ... > > ... dtype=3D"string">Mozilla/5.0 (Windows NT 6.2; Win64; x64) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 > Safari/537.36 >=20 > ... name=3D"Chrome" user-agent=3D"Mozilla/5.0 (Windows NT 6.2; Win64; x64) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36" > version=3D"32.0.11667"> something > >=20 > A few questions: > ** Does the data model need the @user-agent attribute if > ApplicationHeader can model it? > ** Could @swid (defined as "An identifier that can be used to reference t= his > software") be used for a User-Agent? > ** What implementation guidance should be given about how @user-agent > should be set with Service/OperatingSystem? >=20 > To share my own bias, the Application and OperatingSystem Class are > currently very poorly specified. I don't think we should continue improv= ing > them. Instead, we should reference software through CPE > (http://nvd.nist.gov/cpe.cfm) or similar effort as is possible through th= e SCI- > defined class Platform. For the time being, I would drop @user-agent. >=20 > Roman > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile >=20 > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile From blibbet@gmail.com Wed Feb 5 14:08:47 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A16231A00EC for ; Wed, 5 Feb 2014 14:08:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6jc5JgawzEZI for ; Wed, 5 Feb 2014 14:08:40 -0800 (PST) Received: from mail-pa0-x231.google.com (mail-pa0-x231.google.com [IPv6:2607:f8b0:400e:c03::231]) by ietfa.amsl.com (Postfix) with ESMTP id E05261A0209 for ; Wed, 5 Feb 2014 14:08:38 -0800 (PST) Received: by mail-pa0-f49.google.com with SMTP id hz1so882750pad.36 for ; Wed, 05 Feb 2014 14:08:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=8HPr3b3gsHBvp/MGgr/Tg2PwXW2kHY7OB+baM18A81E=; b=h0gbdJ465UxOFAiYAJiArt28tU0iUGHNL2dNfNrHSHTjutyEC6SOvrbfqsWUKJ2tW3 QOhSl9SElYmU0Trd8Gr0Y7EWYR/pWmRMxdhHz2UAPbqJzRR5jx4g9VdlDwN94h3v5S1b n8LEmsEhOst/whPT3y1r4/kIVqn++armmvOu1EMwVYASUGnsPqeBH/zpw5sw1C2Wfq4W JaUp9ybZKUiEyUqjGMuhu+FcMajCZgtIa963ZYrOz8J12a2Xrmj/BWTpoxozfQUsr3ot rRMqsiGkM5KgDTf01UAi99HwHXe4LHWWf7vo06WQ0x4Sp7NLQ2tSwEGfN8xnf0zhmvfY R8Wg== X-Received: by 10.69.31.65 with SMTP id kk1mr5853440pbd.47.1391638118262; Wed, 05 Feb 2014 14:08:38 -0800 (PST) Received: from box.local ([50.125.165.233]) by mx.google.com with ESMTPSA id tu3sm205040868pab.1.2014.02.05.14.08.37 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 05 Feb 2014 14:08:37 -0800 (PST) Message-ID: <52F2B782.2080104@gmail.com> Date: Wed, 05 Feb 2014 14:13:22 -0800 From: Blibbet User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:16.0) Gecko/20121005 Thunderbird/16.0 MIME-Version: 1.0 To: "Waltermire, David A." References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> In-Reply-To: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "mile@ietf.org" Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Feb 2014 22:08:47 -0000 > Please let me know if you have any questions. Will this long-term mapping between SWID and CPE mean that we can ignore SWID and just use CPE? Will I have to pay and/or join the SWID trade group to access this information? MITRE and NIST were goot at SCAP standards, making their data and schemas available without the extra licenses and registration barriers and fees. Do you have to pay ISO for access to their SWID standards? The last time a TagVault evangelist came on this list to push SWID, they failed to make any case for noncommercial use of SWID. http://www.ietf.org/mail-archive/web/sacm/current/msg00679.html SWID adds barriers, that'll make it difficult to create open source software, especially Free Software, that uses SCAP/SACM. Does it still cost US$500/year for an individual to use CPE. The only "Open Source" Microsoft mentions when they defend SWID is an internal project (WIX), where they fund all the fees for it. This sounds bad. SCAP/SACM should not use CPE. From blibbet@gmail.com Wed Feb 5 15:25:27 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B2B41A0299 for ; Wed, 5 Feb 2014 15:25:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id woNo7iW_jcMk for ; Wed, 5 Feb 2014 15:25:25 -0800 (PST) Received: from mail-pb0-x234.google.com (mail-pb0-x234.google.com [IPv6:2607:f8b0:400e:c01::234]) by ietfa.amsl.com (Postfix) with ESMTP id A3ACE1A0275 for ; Wed, 5 Feb 2014 15:25:25 -0800 (PST) Received: by mail-pb0-f52.google.com with SMTP id jt11so1005783pbb.11 for ; Wed, 05 Feb 2014 15:25:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=BlEi/nEUVVU42Eg+TjOO8c22GKGMTaxpyWIeCqptjQU=; b=ie3V+97ilNWh8EmaFKw+akCdLmD0+QNeB3/G2ZrfSo1sjwDiBK63IlFVSRiaJhklBd bFIJa3fVv7BPj0YrMmx2Qi9xBOD1AkaHBYDaKwFZa2q9kXbZT6YAiwwqZhQLHjBnM8Ze U4FB1w2WQ8JS8vfcLeTAMZjzljFYCflY6zLjR61tZjFWWfzK3w+TwHE2TAfSfd5JYZYb 3PxHIK+ColGaHs2VsUicM4TksjdeX2pJbbYm34MB9foYw01tGG6nQlrwI1Iz4ZufNm5b IMCUYq1/UKG9oNUiBvB10UArOxdYSLu0tca4RdwMEEe+o4g1aJCGuBir6yGH6peoH/bg 7gFQ== X-Received: by 10.68.245.200 with SMTP id xq8mr6333424pbc.21.1391642724994; Wed, 05 Feb 2014 15:25:24 -0800 (PST) Received: from box.local ([184.11.139.129]) by mx.google.com with ESMTPSA id ug2sm206388897pac.21.2014.02.05.15.25.24 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 05 Feb 2014 15:25:24 -0800 (PST) Message-ID: <52F2C980.4020503@gmail.com> Date: Wed, 05 Feb 2014 15:30:08 -0800 From: Blibbet User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:16.0) Gecko/20121005 Thunderbird/16.0 MIME-Version: 1.0 To: "Waltermire, David A." References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> <52F2B782.2080104@gmail.com> In-Reply-To: <52F2B782.2080104@gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "mile@ietf.org" Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Feb 2014 23:25:27 -0000 Sorry, I mistyped two things in my last message. > MITRE and NIST were goot at SCAP standards, ... /goot/good NIST/SCAP/IETF are good at making standards, ... > SCAP/SACM should not use CPE. /CPE/SWID. SCAP/SACM should not use SWID. (CPE should be used. SWID adds to many barriers and restrictions.) Thanks. From trammell@tik.ee.ethz.ch Sun Feb 9 23:43:29 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDC7D1A07C0 for ; Sun, 9 Feb 2014 23:43:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.748 X-Spam-Level: X-Spam-Status: No, score=-4.748 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.548] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yebIM6M4ru-h for ; Sun, 9 Feb 2014 23:43:27 -0800 (PST) Received: from smtp.ee.ethz.ch (smtp.ee.ethz.ch [129.132.2.219]) by ietfa.amsl.com (Postfix) with ESMTP id 67D8E1A07BC for ; Sun, 9 Feb 2014 23:43:26 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by smtp.ee.ethz.ch (Postfix) with ESMTP id 9964CD9308 for ; Mon, 10 Feb 2014 08:43:26 +0100 (MET) X-Virus-Scanned: by amavisd-new on smtp.ee.ethz.ch Received: from smtp.ee.ethz.ch ([127.0.0.1]) by localhost (.ee.ethz.ch [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 5BrP+dfoIX9y for ; Mon, 10 Feb 2014 08:43:26 +0100 (MET) Received: from [10.0.27.100] (cust-integra-122-165.antanet.ch [80.75.122.165]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: briant) by smtp.ee.ethz.ch (Postfix) with ESMTPSA id 21545D9307 for ; Mon, 10 Feb 2014 08:43:25 +0100 (MET) From: Brian Trammell Content-Type: multipart/signed; boundary="Apple-Mail=_8F2DA93B-4F0A-47EB-8C03-289DADDAECAE"; protocol="application/pgp-signature"; micalg=pgp-sha512 Message-Id: <1A5C7743-0921-419D-BD30-37C40A405FFE@tik.ee.ethz.ch> Date: Mon, 10 Feb 2014 08:43:24 +0100 To: MILE IETF Mime-Version: 1.0 (Mac OS X Mail 7.1 \(1827\)) X-Mailer: Apple Mail (2.1827) Subject: [mile] Call for agenda slots, MILE at IETF 89 London X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Feb 2014 07:43:30 -0000 --Apple-Mail=_8F2DA93B-4F0A-47EB-8C03-289DADDAECAE Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Greetings, all, Please send requests for agenda slots in London to = ippm-chairs@tools.ietf.org by Thursday, February 13. FYI, The MILE = meeting is presently scheduled for 11:50 Friday 7 March. Many thanks, best regards, Brian --Apple-Mail=_8F2DA93B-4F0A-47EB-8C03-289DADDAECAE Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJS+IMcAAoJENt3nsOmbNJcXf0H/10l/1oJyGSq+eVA4aUe9JYp oR9lIuKWsxXUWC/gOYZNHFBuuiJ8jjaj5zEaA+CF1HVWcW3irOmbBaXDzi5otJdD VvwcJJjF8Mdbxy8VkeMIbBXARqfWoW1/sBSIFc0KBaKgtnMaNrycddODww6tPVLY zJM1l18fIwSLSw6vn+4D57oonBoZ3ygj1/+GfNYQO2gG92cjcjKd5Ud1JAY7czKP N9cB8PdsAOpjsMtB2OaJQ0kPI9JxlFwKuCODiQje2IdDnNWPwm1wxvB7ostpOzSC f5cfnFR2X883UXu4FZ4aS/bIfuIIVvDyduouQI5ONHLcBo9f23XCYmp4lSSgTT8= =bC+m -----END PGP SIGNATURE----- --Apple-Mail=_8F2DA93B-4F0A-47EB-8C03-289DADDAECAE-- From kathleen.moriarty.ietf@gmail.com Mon Feb 10 07:16:33 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6996C1A0846 for ; Mon, 10 Feb 2014 07:16:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AnwyWq4HDAOH for ; Mon, 10 Feb 2014 07:16:31 -0800 (PST) Received: from mail-la0-x234.google.com (mail-la0-x234.google.com [IPv6:2a00:1450:4010:c03::234]) by ietfa.amsl.com (Postfix) with ESMTP id 47C661A032E for ; Mon, 10 Feb 2014 07:16:31 -0800 (PST) Received: by mail-la0-f52.google.com with SMTP id c6so4934543lan.11 for ; Mon, 10 Feb 2014 07:16:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=o9xprRjxR3GVbLJRqRqbbWCAYfhi4sEKj284Yr9pfKw=; b=FF+M9MF1CabBvWiKzTfObVIjWKbElvHjPOszM8t9L0xUsC+PvR5KcTeWIhHCFcDyaM nSwnhZvyCQouL92FQ49FIxSnjkeiywD9IjguqiQc6Lhk46QHJpvS+imuXm2W8BesJ54J O5WargPzCJEakI1+C9xJeRTHDXWxiyC1ZC6lcMFb0f0OOaO7t6EXxO85Z5GHcogs5lvb DKnXkZtIU2uBJ7GP/DVbvVod4bMK4s1z3pKMhGqUO/XV/aDXQKOu/hej5AL6iFUdvgAS ZxsnbeE8NYXcn8t9Ndp1qej/pQ7uZLByjQ5QDs9vbBWCpBfYtcC/RhiXJboorNgz07hB TRQQ== MIME-Version: 1.0 X-Received: by 10.112.175.43 with SMTP id bx11mr1650110lbc.51.1392045390273; Mon, 10 Feb 2014 07:16:30 -0800 (PST) Received: by 10.112.149.105 with HTTP; Mon, 10 Feb 2014 07:16:30 -0800 (PST) In-Reply-To: <1A5C7743-0921-419D-BD30-37C40A405FFE@tik.ee.ethz.ch> References: <1A5C7743-0921-419D-BD30-37C40A405FFE@tik.ee.ethz.ch> Date: Mon, 10 Feb 2014 10:16:30 -0500 Message-ID: From: Kathleen Moriarty To: Brian Trammell Content-Type: multipart/alternative; boundary=001a11343898ffa25f04f20ed202 Cc: MILE IETF Subject: Re: [mile] Call for agenda slots, MILE at IETF 89 London X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Feb 2014 15:16:33 -0000 --001a11343898ffa25f04f20ed202 Content-Type: text/plain; charset=ISO-8859-1 Thanks for sending this out and I have a slight correction, please send the requests to mile-chairs@tools.ietf.org Best regards, Kathleen On Mon, Feb 10, 2014 at 2:43 AM, Brian Trammell wrote: > Greetings, all, > > Please send requests for agenda slots in London to > ippm-chairs@tools.ietf.org by Thursday, February 13. FYI, The MILE > meeting is presently scheduled for 11:50 Friday 7 March. > > Many thanks, best regards, > > Brian > > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile > > -- Best regards, Kathleen --001a11343898ffa25f04f20ed202 Content-Type: text/html; charset=ISO-8859-1
Thanks for sending this out and I have a slight correction, please send the requests to mile-chairs@tools.ietf.org

Best regards,
Kathleen


On Mon, Feb 10, 2014 at 2:43 AM, Brian Trammell <trammell@tik.ee.ethz.ch> wrote:
Greetings, all,

Please send requests for agenda slots in London to ippm-chairs@tools.ietf.org by Thursday, February 13. FYI, The MILE meeting is presently scheduled for 11:50 Friday 7 March.

Many thanks, best regards,

Brian

_______________________________________________
mile mailing list
mile@ietf.org
https://www.ietf.org/mailman/listinfo/mile




--

Best regards,
Kathleen
--001a11343898ffa25f04f20ed202-- From trammell@tik.ee.ethz.ch Mon Feb 10 07:25:24 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8947C1A0860 for ; Mon, 10 Feb 2014 07:25:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.747 X-Spam-Level: X-Spam-Status: No, score=-4.747 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.548] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9yRcoWHRmW1I for ; Mon, 10 Feb 2014 07:25:20 -0800 (PST) Received: from smtp.ee.ethz.ch (smtp.ee.ethz.ch [129.132.2.219]) by ietfa.amsl.com (Postfix) with ESMTP id 306EB1A0327 for ; Mon, 10 Feb 2014 07:25:09 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by smtp.ee.ethz.ch (Postfix) with ESMTP id 95575D9308; Mon, 10 Feb 2014 16:25:08 +0100 (MET) X-Virus-Scanned: by amavisd-new on smtp.ee.ethz.ch Received: from smtp.ee.ethz.ch ([127.0.0.1]) by localhost (.ee.ethz.ch [127.0.0.1]) (amavisd-new, port 10024) with LMTP id qRNUx2j4J5qy; Mon, 10 Feb 2014 16:25:08 +0100 (MET) Received: from pb-10243.ethz.ch (pb-10243.ethz.ch [82.130.102.152]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: briant) by smtp.ee.ethz.ch (Postfix) with ESMTPSA id 2E8ACD9307; Mon, 10 Feb 2014 16:25:08 +0100 (MET) Content-Type: multipart/signed; boundary="Apple-Mail=_61892A73-558D-464B-BA7B-018F561C1955"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 7.1 \(1827\)) From: Brian Trammell In-Reply-To: Date: Mon, 10 Feb 2014 16:25:07 +0100 Message-Id: <65294034-75F0-4162-9313-D989DD7458B5@tik.ee.ethz.ch> References: <1A5C7743-0921-419D-BD30-37C40A405FFE@tik.ee.ethz.ch> To: Kathleen Moriarty X-Mailer: Apple Mail (2.1827) Cc: MILE IETF Subject: Re: [mile] Call for agenda slots, MILE at IETF 89 London X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Feb 2014 15:25:24 -0000 --Apple-Mail=_61892A73-558D-464B-BA7B-018F561C1955 Content-Type: multipart/alternative; boundary="Apple-Mail=_1E5F1997-B1DC-4CFB-BA14-D37077BA4793" --Apple-Mail=_1E5F1997-B1DC-4CFB-BA14-D37077BA4793 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=iso-8859-1 Greetings, all,=20 Indeed, apologies for the copy-paste error (and thanks Kathleen for the = correction). Best regards, Brian On 10 Feb 2014, at 16:16, Kathleen Moriarty = wrote: > Thanks for sending this out and I have a slight correction, please = send the requests to mile-chairs@tools.ietf.org >=20 > Best regards, > Kathleen >=20 >=20 > On Mon, Feb 10, 2014 at 2:43 AM, Brian Trammell = wrote: > Greetings, all, >=20 > Please send requests for agenda slots in London to = ippm-chairs@tools.ietf.org by Thursday, February 13. FYI, The MILE = meeting is presently scheduled for 11:50 Friday 7 March. >=20 > Many thanks, best regards, >=20 > Brian >=20 > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile >=20 >=20 >=20 >=20 > --=20 >=20 > Best regards, > Kathleen --Apple-Mail=_1E5F1997-B1DC-4CFB-BA14-D37077BA4793 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=iso-8859-1 Greetings, all, 

Indeed, apologies for the copy-paste error (and thanks Kathleen for the correction).

Best regards,

Brian

On 10 Feb 2014, at 16:16, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> wrote:

Thanks for sending this out and I have a slight correction, please send the requests to mile-chairs@tools.ietf.org

Best regards,
Kathleen


On Mon, Feb 10, 2014 at 2:43 AM, Brian Trammell <trammell@tik.ee.ethz.ch> wrote:
Greetings, all,

Please send requests for agenda slots in London to ippm-chairs@tools.ietf.org by Thursday, February 13. FYI, The MILE meeting is presently scheduled for 11:50 Friday 7 March.

Many thanks, best regards,

Brian

_______________________________________________
mile mailing list
mile@ietf.org
https://www.ietf.org/mailman/listinfo/mile




--

Best regards,
Kathleen

--Apple-Mail=_1E5F1997-B1DC-4CFB-BA14-D37077BA4793-- --Apple-Mail=_61892A73-558D-464B-BA7B-018F561C1955 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJS+O9TAAoJENt3nsOmbNJcqJYH/ij+V78hA+Hi5vGpgBu4iqwN MW7icbV3U0K2x1RPv834SZEvXXiWwm+fZw0FornWGSdpYw2KoSwbBOqmZxmijtVz GRep6ChmJApxsyF30gqMXP3mKnqaw/Y62k8bPDhDittsjWUsRfiqiJJpVuO9alne SkIQti2XPWPNsOl2mmomslp+kUUYPaL5VZVflpGb2OG4Izlw6vh7RbR10xWgDGe5 7abfR3qB2Q5Xj1DH0GAEO6hppwkttqyl23EysUg+Ism92gIJVRoC3lBvE7tL+jaI syY283nNYE4rA0R9JEqTqKJt7xFgj0iBWnpnO5+k15bLAzx5Sh/36+Jgc7Ssz5I= =U1s2 -----END PGP SIGNATURE----- --Apple-Mail=_61892A73-558D-464B-BA7B-018F561C1955-- From david.waltermire@nist.gov Mon Feb 10 11:57:52 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26C741A047C for ; Mon, 10 Feb 2014 11:57:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bcLrTxRV_nq4 for ; Mon, 10 Feb 2014 11:57:49 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2lp0205.outbound.protection.outlook.com [207.46.163.205]) by ietfa.amsl.com (Postfix) with ESMTP id BCB9C1A046A for ; Mon, 10 Feb 2014 11:57:48 -0800 (PST) Received: from BLUPR09MB038.namprd09.prod.outlook.com (10.255.211.144) by BLUPR09MB040.namprd09.prod.outlook.com (10.255.211.154) with Microsoft SMTP Server (TLS) id 15.0.873.15; Mon, 10 Feb 2014 19:57:46 +0000 Received: from BLUPR09MB038.namprd09.prod.outlook.com ([169.254.11.227]) by BLUPR09MB038.namprd09.prod.outlook.com ([169.254.11.227]) with mapi id 15.00.0873.009; Mon, 10 Feb 2014 19:57:46 +0000 From: "Waltermire, David A." To: Blibbet Thread-Topic: [mile] CPE and SWID Thread-Index: Ac8iuuT2GnSM5l/DSiW4GVRSwDSDnAABJZYAAPMpVfA= Date: Mon, 10 Feb 2014 19:57:46 +0000 Message-ID: References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> <52F2B782.2080104@gmail.com> In-Reply-To: <52F2B782.2080104@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [129.6.227.199] x-forefront-prvs: 0118CD8765 x-forefront-antispam-report: SFV:NSPM; SFS:(10009001)(6009001)(469094003)(51704005)(53484002)(377454003)(199002)(13464003)(189002)(76482001)(53806001)(74502001)(46102001)(54356001)(1411001)(51856001)(31966008)(94316002)(47446002)(81542001)(69226001)(94946001)(15975445006)(92566001)(54316002)(56776001)(76786001)(76796001)(74316001)(83072002)(85852003)(19580405001)(83322001)(80976001)(86362001)(81342001)(19580395003)(95416001)(85306002)(93516002)(95666001)(90146001)(81816001)(74662001)(81686001)(33646001)(56816005)(93136001)(74876001)(74706001)(87936001)(2656002)(76576001)(59766001)(77096001)(77982001)(4396001)(74366001)(65816001)(80022001)(66066001)(87266001)(47976001)(49866001)(50986001)(47736001)(15202345003)(63696002)(79102001)(2004002)(24736002); DIR:OUT; SFP:1101; SCL:1; SRVR:BLUPR09MB040; H:BLUPR09MB038.namprd09.prod.outlook.com; CLIP:129.6.227.199; FPR:EC9CF917.A8FA96D1.99D1F05B.4EF8D161.204DE; InfoNoRecordsA:1; MX:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov Cc: "mile@ietf.org" Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Feb 2014 19:57:52 -0000 Blibbet, I don't think we can simply ignore SWIDs. In my personal opinion, SWIDs hav= e many advantages over CPEs including: - Providing authoritative, high-fidelity software data generated at build t= ime by the software creator/publisher. CPEs are commonly generated by 3rd p= arties in a labor intensive way by scraping vendor websites and vulnerabili= ty bulletins for software data that is often incomplete and inaccurate. - Providing more robust software metadata that goes beyond the 11 fields su= pported by CPE including tags/identification for patches which CPE doesn't = support. - Normalizing the data representation for installed software on endpoints r= egardless of platform/software specific technologies. - Providing software footprint details including composite files, versions,= and hashes. This is not something that CPE supports. Simply put, SWIDs provide greater support for the management of software ac= ross the deployment lifecycle than CPE allows for. This has both security a= nd IT operational benefits. SWIDs allow for greater coverage and address th= e scalability concerns that currently exist with CPE. With SWID there is not a requirement to pay or join any trade group to part= icipate. Software publishers are responsible for the creation and propagati= on of SWID tags they produce. There is not a requirement to centrally curat= e them like there is with the US Government curated CPE dictionary. The ISO specification is behind a paywall, which is the ISO model for publi= cation. The IETF and ISO both reference each other's specifications. This s= hould not be a significant barrier. The schema is freely available. You can access it here: http://standards.iso.org/iso/19770/-2/2009/schema.xsd TagVault is developing best practice guides and certification requirements = to help interested software publishers to demonstrate the degree of informa= tion provided by a publisher's SWID tags to support various use cases. They= have stated publically that they intend to make these documents publically= available as they are produced. Participation in TagVault is not a require= ment for SWID tag publication; it is simply a value added service for publi= shers and consumers if they choose to participate. I know of no US$500/year cost for use of CPE. Current CPE information is pr= ovided for use on a voluntary basis at no cost to the consumer at: http://nvd.nist.gov/cpe.cfm I hope this helps address your questions/concerns. Sincerely, Dave > -----Original Message----- > From: Blibbet [mailto:blibbet@gmail.com] > Sent: Wednesday, February 05, 2014 5:13 PM > To: Waltermire, David A. > Cc: mile@ietf.org > Subject: Re: [mile] CPE and SWID >=20 > > Please let me know if you have any questions. >=20 > Will this long-term mapping between SWID and CPE mean that we can ignore > SWID and just use CPE? >=20 > Will I have to pay and/or join the SWID trade group to access this > information? MITRE and NIST were goot at SCAP standards, making their dat= a > and schemas available without the extra licenses and registration barrier= s > and fees. Do you have to pay ISO for access to their SWID standards? The = last > time a TagVault evangelist came on this list to push SWID, they failed to= make > any case for noncommercial use of SWID. > http://www.ietf.org/mail-archive/web/sacm/current/msg00679.html >=20 > SWID adds barriers, that'll make it difficult to create open source softw= are, > especially Free Software, that uses SCAP/SACM. >=20 > Does it still cost US$500/year for an individual to use CPE. The only "Op= en > Source" Microsoft mentions when they defend SWID is an internal project > (WIX), where they fund all the fees for it. >=20 > This sounds bad. SCAP/SACM should not use CPE. >=20 From tony@yaanatech.com Mon Feb 10 16:48:30 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5E761A066B for ; Mon, 10 Feb 2014 16:48:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.449 X-Spam-Level: X-Spam-Status: No, score=-2.449 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.548, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M7Ho6tRwTvDC for ; Mon, 10 Feb 2014 16:48:29 -0800 (PST) Received: from extmail1.yaanatech.com (extmail1.yaanatech.com [63.128.177.51]) by ietfa.amsl.com (Postfix) with SMTP id 10BAB1A071C for ; Mon, 10 Feb 2014 16:48:26 -0800 (PST) Received: from [192.168.1.20] (pool-71-171-106-160.clppva.fios.verizon.net [71.171.106.160]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by extmail1.yaanatech.com (Postfix) with ESMTP id AC8785808B; Tue, 11 Feb 2014 00:50:39 +0000 (UTC) Message-ID: <52F97357.3000305@yaanatech.com> Date: Mon, 10 Feb 2014 19:48:23 -0500 From: Tony Rutkowski Organization: Yaana Technologies User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: "Waltermire, David A." , Blibbet References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> <52F2B782.2080104@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Cc: "mile@ietf.org" Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: tony@yaanatech.com List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Feb 2014 00:48:31 -0000 Dave, Across multiple bodies and companies, the notion of SWIDs has been DOA. Why is it still being pursued here? --tony From rdd@cert.org Tue Feb 11 11:11:09 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05A9F1A06FF for ; Tue, 11 Feb 2014 11:11:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.597 X-Spam-Level: * X-Spam-Status: No, score=1.597 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FRT_STOCK2=3.988, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_FRT_STOCK2=0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B1Jo4g7XYNX7 for ; Tue, 11 Feb 2014 11:11:00 -0800 (PST) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) by ietfa.amsl.com (Postfix) with ESMTP id 423D31A06E4 for ; Tue, 11 Feb 2014 11:10:46 -0800 (PST) Received: from timber.sei.cmu.edu (timber.sei.cmu.edu [10.64.21.23]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1BJAiHQ030096 for ; Tue, 11 Feb 2014 14:10:44 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1392145844; bh=E5+aTO0iO0lBB4ZnNk5+SyCYbWlA5cuulTQw1W2iWPw=; h=From:To:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:MIME-Version:Sender:Reply-To:Cc; b=cSnY0rIVjBrAKxrLnqvPENVgiYCX2idID1Gey1brKtlN0D8MPxMMKXY2r/VitA9h4 Z2nTaH5hscG1LdBVi8bs8MApMjCy/d/20/AMEg3uC4bzkiqIDTrsrBL6i2O7e+7iQH GAZDCOeRJmgB8H8820w8h5dA6W+PeM7KL+K25ROM= Received: from CASCADE.ad.sei.cmu.edu (cascade.sei.cmu.edu [10.64.28.248]) by timber.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1BJAi91015186 for ; Tue, 11 Feb 2014 14:10:44 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.02.0347.000; Tue, 11 Feb 2014 14:10:43 -0500 From: "Roman D. Danyliw" To: "mile@ietf.org" Thread-Topic: [mile] Describing the time window during which an indicator should be used Thread-Index: Ac8QYd5ePk2lBkToRcSzhFdZzeEY9QBp2miAAZ7BfgAACK1eYAOtY33g Date: Tue, 11 Feb 2014 19:10:43 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC54C39D29@marathon> References: <359EC4B99E040048A7131E0F4E113AFC54C12208@marathon> <359EC4B99E040048A7131E0F4E113AFC54C1EA8D@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC54C1EA8D@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: multipart/alternative; boundary="_000_359EC4B99E040048A7131E0F4E113AFC54C39D29marathon_" MIME-Version: 1.0 Subject: Re: [mile] Describing the time window during which an indicator should be used X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Feb 2014 19:11:09 -0000 --_000_359EC4B99E040048A7131E0F4E113AFC54C39D29marathon_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello all! I'm checking in with the group to hear if the proposal outlined below addre= sses the need of the community per Issue #28 (http://trac.tools.ietf.org/wg= /mile/trac/ticket/28). Does it satisfy the need? Roman From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Roman D. Danyliw Sent: Thursday, January 23, 2014 9:20 PM To: Eric Burger Cc: mile@ietf.org Subject: Re: [mile] Describing the time window during which an indicator sh= ould be used I see your perspective Eric. Let's talk through a little more about how we = could use this fifth indicator attribute, perhaps calling it "indicator-per= sistent" for the moment. It seems like we'd end up in one of the following= situations: (1) known start time and end time for an indicator (i.e., only look for the= indicator during the described interval) (2) known start time for an indicator (i.e., look for the indicator indefin= itely after the start time) (3) known end time (i.e., an indicator won't be valid after a certain time = so look for it only before an end time) (4) unknown start or end time (i.e., look for the indicator on any data you= have) Do we want to deal with all of them? Are there others? If we did want to = cover all cases perhaps we could define @indicator-persistent as an ENUM: "start" =3D assume that the indicator is valid up to the provided @indicato= r-end-time. If this value is selected, @indicator-end-time must be set and= @indicator-start must not be set. "end" =3D assume that the indicator is valid indefinitely starting from the= provided @indicator-start-time. If this value is selected, @indicator-sta= rt-time value must be set and @indicator-end-time value must not be set. "defined" =3D assume that the indicator is valid between the specified @ind= icator-start-time and @indicator-end-time. If this value is selected both = the @indicator-start-time and @indicator-end-time must be set. "unknown" =3D assume that the indicator can be valid during any time period= . If this value is selected both @indicator-start-time and @indicator-end-= time must not be set. This is the default. Roman From: Eric Burger [mailto:eburger@cs.georgetown.edu] Sent: Thursday, January 23, 2014 11:45 AM To: Roman D. Danyliw Cc: mile@ietf.org Subject: Re: [mile] Describing the time window during which an indicator sh= ould be used Say what we mean. We are already paying the XML tax, so a fifth attribute d= oes not really 'cost' us anything. I can guarantee that we will have more p= roblems than a Year 3000 problem if we overload indicator-etime. On Jan 15, 2014, at 11:02 AM, Roman D. Danyliw > wrote: Hi, I'd like to explore the community thinking on how to implement a flag as Ch= ris suggested to note that an indicator is persistent. Assuming that the c= onvention of @indicator-stime and -etime was adopted, a few possibilities t= o add a "persistence flag" would be: (1) Add a boolean attribute, say @indicator-persistent, to convey to always= look for this indicator. No @indicator-etime would be required. (2) Define a particular date far into the future for @indicator-etime that = conveys persistence. For example, when @indicator-etime=3D"3000/12/01 12:0= 0:00" is seen, this indicator is persistent. Option #1 is most intuitively self-describing but adds another attribute, n= ow the fifth, to the list of "special indicator attributes". Option #2 reduces the number of additional attributes. Personally, I prefer #2. Your thoughts? Roman From: Harrington, Christopher [mailto:Christopher.Harrington@emc.com] Sent: Monday, January 13, 2014 8:18 AM To: Roman D. Danyliw; Stoecker, Paul Cc: mile@ietf.org Subject: RE: [mile] Describing the time window during which an indicator sh= ould be used Roman, >From what I have seen the aging is usually up to the recipient. I would say= that option #1 would be better. For purposes of deciding to stop looking for an indicator there is another = data point that is used far more frequently, Last Seen time. For the majori= ty of indicators we use the time it was last "seen". For us the "seen" mean= s that either we have seen it being used or we have intel from a 3rd party = or open source that it is still in use. The only time we use the stime-etim= e paradigm is when there is an infection (delivery stage of the Kill Chain)= that was valid but later cleaned up. Nbc.com was compromi= sed last year for about 4 hours then cleaned up. In that case we would use = stime-etime. There are indicators that we call persistent. These are indica= tors that we will never stop looking for. These could be indicators that ar= e used exclusively by a specific threat actor (like a domain registered by = an actor) or something that we used in a previous incident at our organizat= ion, like RSA breech related indicators. A construct to flag an indicator a= s persistent would be helpful as this is information is something we routin= ely share. Thanks, --Chris From: Roman D. Danyliw [mailto:rdd@cert.org] Sent: Thursday, January 09, 2014 4:59 PM To: Harrington, Christopher; Stoecker, Paul Cc: mile@ietf.org Subject: RE: [mile] Describing the time window during which an indicator sh= ould be used Hello! Chris: Thanks for the background! To date, the message traffic suggests interest in per-indicator annotation = of validity. That would suggest something as follows: Or The follow-up discuss asked if organizations really every stop looking for = indicators they have. One answer was yes. How do we want to handle that? Ideas might include: (1) provide only an @indicator-stime and @indicator-etime, and these are th= e best guess of the reporter of how long to make it valid. The recipient c= an decide how and if to honor these. (2) provide another attribute that would suggest an aging policy that the r= ecipient can choose to honor. What would we those aging policies? Roman From: Harrington, Christopher [mailto:Christopher.Harrington@emc.com] Sent: Monday, December 23, 2013 10:46 AM To: Stoecker, Paul Cc: Roman D. Danyliw; mile@ietf.org Subject: RE: [mile] Describing the time window during which an indicator sh= ould be used Yes we do stop looking. A good example is when NBC.com got= hacked a few months ago. We watched for people hitting it while the URL wa= s malicious. Once it was cleaned up we stopped watching for it since it was= a somewhat popular URL that would fire all the time and bury us in false = positives. Indicator aging is an area that nobody has a good handle one. Each organiza= tion seems to have their own way of doing things with aging, if they do any= thing at all. Some commercial threat intel providers use a decrementing cou= nter based on the last time the indicator was seen. At EMC we make the agin= g calculation based on time since last seen, attribution (if known), kill c= hain stage, confidence in the source and other factors. It's not automated= at this point. We can't keep all indicators forever. At some point the watch lists and blo= ck lists on your Proxy, firewall, etc get too large and the devices start h= aving issues. We ran into this at EMC and had to switch from Proxy blocks f= or domains to DNS RPZ with a sinkhole web servers. There were too many doma= ins in the proxy block list. We have tens of thousands. There are indicator= s that we consider "persistent". These are indicators that we always want t= o be alerted about. Generally these are advanced threat / APT and have eith= er been seen in activity involving EMC or they belong to threat actor group= s that we have seen at EMC. Thanks, --Chris From: Stoecker, Paul Sent: Monday, December 23, 2013 10:26 AM To: Harrington, Christopher Cc: Roman D. Danyliw; mile@ietf.org Subject: Re: [mile] Describing the time window during which an indicator sh= ould be used I have a question...Do we really stop looking for IOCs whose time has expir= ed? Like a malicious URL whose time has expired...do you stop looking for = that URL? Let's say that Paul the malware dude got a hold of the IODEF doc= ument...I shutdown my web server and after the time expired I turned it bac= k on? Just wondering how IOC aging is actually handled? Sent from my iPhone On Dec 20, 2013, at 4:57 PM, "Harrington, Christopher" > wrote: Hello, Answers inline below. Thanks, --Chris Christopher Harrington Consulting Security Engineer GSO - Critical Incident Response Center EMC 174 Middlesex Turnpike Bedford, MA 01730 781-515-5862 (work) 603-583-1585 (cell) From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Roman D. Danyliw Sent: Friday, December 20, 2013 4:26 PM To: mile@ietf.org Subject: [mile] Describing the time window during which an indicator should= be used Hello! Ticket #28 (http://trac.tools.ietf.org/wg/mile/trac/ticket/28) is tracking = the need to convey the valid time during which to apply an indicator. I wa= nted to solicit from the community the degree of flexibility desired. For = the purposes of this discussion an indicator is defined as a class that has= an @indicator-uid attribute. ** Does this flexibility need to exist on a per indicator basis? Example 1, Yes, a malicious URL would be valid only as long as it is live. ** Could it be at the EventData level (and the time window cascades to all = indicators that are children)? Example 2:, ... = ... many domain indicators ... Example 3: ... 2013/12/01 12:00:00 ... ... many domain indicators ... Yes, you could have multiple malware delivery URLs that are all on the same= domain. If the Domain is specified at EvenData level then when it is no lo= nger valid the children would no longer be valid. I hope I explained that r= ight :) I am not sure how it would differ between Example 2 and 3. ** Could it be at the Incident level? Example 4: ... 2013/12/01 12:00:00 ... many domain indicators ... If there was only one Indicator in an incident it could be. In practical te= rms this is very unlikely. Per indicator time information would provide the most flexibility but would= require duplication of the same information. A time window for indicator validity specified at the Incident level would = not allow for multiple time windows per indicator. A time window for indicator validity specified in the EventData class would= require nested EventData instances to convey different time period. Also,= some indicators are only in the Incident class so this approach would be i= nsufficient. Perhaps a hybrid approach where this timing information is in= the EventData and IncidentData classes could be possible. Personally I think the safest approach is validity per Indicator. Validity= for parent / child would be rare and validity per Incident even rarer. One question, how do we represent "still valid"? If I have an indicator tha= t is valid when I send the message how do I know what that time represents?= If I put "12/20/2013 13:00" as the time can you tell if I mean that it wa= s still valid when I sent the message at that time or that its validity per= iod ended at that time. Those are very different scenarios and critically i= mportant for searching / responding to indicator hits. Roman _______________________________________________ mile mailing list mile@ietf.org https://www.ietf.org/mailman/listinfo/mile _______________________________________________ mile mailing list mile@ietf.org https://www.ietf.org/mailman/listinfo/mile --_000_359EC4B99E040048A7131E0F4E113AFC54C39D29marathon_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello all!

 <= /p>

I’m checking in wit= h the group to hear if the proposal outlined below addresses the need of th= e community per Issue #28 (http://trac.tools.ietf.org/wg/mile/trac/ticket/28).  Does it satisfy the need?

 <= /p>

Roman

 <= /p>

From: mile [ma= ilto:mile-bounces@ietf.org] On Behalf Of Roman D. Danyliw
Sent: Thursday, January 23, 2014 9:20 PM
To: Eric Burger
Cc: mile@ietf.org
Subject: Re: [mile] Describing the time window during which an indic= ator should be used

 

I see your perspective Er= ic. Let’s talk through a little more about how we could use this fift= h indicator attribute, perhaps calling it “indicator-persistent”= ; for the moment.  It seems like we’d end up in one of the follow= ing situations:

 <= /p>

(1) known start time and = end time for an indicator (i.e., only look for the indicator during the des= cribed interval)

(2) known start time for = an indicator (i.e., look for the indicator indefinitely after the start tim= e)

(3) known end time (i.e.,= an indicator won’t be valid after a certain time so look for it only= before an end time)

(4) unknown start or end = time (i.e., look for the indicator on any data you have)<= /p>

 <= /p>

Do we want to deal with a= ll of them?  Are there others?  If we did want to cover all cases= perhaps we could define @indicator-persistent as an ENUM:

 <= /p>

“start” =3D a= ssume that the indicator is valid up to the provided @indicator-end-time.&n= bsp; If this value is selected, @indicator-end-time must be set and @indica= tor-start must not be set.

“end” =3D ass= ume that the indicator is valid indefinitely starting from the provided @in= dicator-start-time.  If this value is selected, @indicator-start-time value must be set and @indicator-end-time value must not be set.

“defined” =3D= assume that the indicator is valid between the specified @indicator-start-= time and @indicator-end-time.  If this value is selected both the @ind= icator-start-time and @indicator-end-time must be set.

“unknown” =3D= assume that the indicator can be valid during any time period.  If th= is value is selected both @indicator-start-time and @indicator-end-time mus= t not be set.  This is the default.

 <= /p>

Roman

 <= /p>

From: Eric Bur= ger [mailto:eburger@cs.georget= own.edu]
Sent: Thursday, January 23, 2014 11:45 AM
To: Roman D. Danyliw
Cc: mile@ietf.org
Subject: Re: [mile] Describing the time window during which an indic= ator should be used

 

Say what we mean. We are already paying the XML tax,= so a fifth attribute does not really ‘cost’ us anything. I can= guarantee that we will have more problems than a Year 3000 problem if we o= verload indicator-etime.

 

On Jan 15, 2014, at 11:02 AM, Roman D. Danyliw <<= a href=3D"mailto:rdd@cert.org">rdd@cert.org> wrote:

 

Hi,

 

I’d like to explore= the community thinking on how to implement a flag as Chris suggested to no= te that an indicator is persistent.  Assuming that the convention of @indicator-stime and –etime was adopted, a few possibilities to add a “p= ersistence flag” would be:

 

(1) Add a boolean attribu= te, say @indicator-persistent, to convey to always look for this indicator.=   No @indicator-etime would be required.

 

(2) Define a particular d= ate far into the future for @indicator-etime that conveys persistence. = ; For example, when @indicator-etime=3D”3000/12/0= 1 12:00:00”  is seen, this indicator is persistent.

 

Option #1 is most intuitively self-desc= ribing but adds another attribute, now the fifth, to the list of “spe= cial indicator attributes”.

 

Option #2 reduces the number of additio= nal attributes.

 

Personally, I prefer #2.  Your tho= ughts?

 

Roman

 

From: Harrington, Christopher [mailto:Christopher.Harrington@emc.com] 
Sent: Monday, Janu= ary 13, 2014 8:18 AM
To: Roman D. Danyl= iw; Stoecker, Paul
Cc: mile@ietf.org Subject: RE: [mile= ] Describing the time window during which an indicator should be used

 

Roman,

 

From what I have seen the= aging is usually up to the recipient. I would say that option #1 would be = better.

 

For purposes of deciding = to stop looking for an indicator there is another data point that is used f= ar more frequently, Last Seen time. For the majority of indicators we use the time it was last “seen”. For us the R= 20;seen” means that either we have seen it being used or we have inte= l from a 3rd p= arty or open source that it is still in use. The only time we use the stime-etime paradigm is when there is an infection (delivery stage of = the Kill Chain) that was valid but later cleaned up. Nbc.com was compromised last year for about 4 hours then cleaned up. In that case we w= ould use stime-etime. There are indicators that we call persistent. These a= re indicators that we will never stop looking for. These could be indicator= s that are used exclusively by a specific threat actor (like a domain registered by an actor) or something = that we used in a previous incident at our organization, like RSA breech re= lated indicators. A construct to flag an indicator as persistent would be h= elpful as this is information is something we routinely share.

 

Thanks,

 

--Chris

 

From: Roman D. Danyliw [m= ailto:rdd@cert.org] <= /span>
Sent: Thursday, Ja= nuary 09, 2014 4:59 PM
To: Harrington, Ch= ristopher; Stoecker, Paul
Cc: mile@ietf.org Subject: RE: [mile= ] Describing the time window during which an indicator should be used

 

Hello!

 

Chris: Thanks for the bac= kground!

 

To date, the message traf= fic suggests interest in per-indicator annotation of validity.  That w= ould suggest something as follows:

 

<Assessment indicator-uid=3D”f= oo-12345” indicator-stime=3D”2013/12/01 12:00:00”>

Or

<Assessment indicator-uid=3D”f= oo-12345” indicator-stime=3D”2013/12/01 12:00:00” indicat= or-etime=3D”2013/12/01 13:00:00”-->

 

The follow-up discuss asked if organiza= tions really every stop looking for indicators they have.  One answer = was yes.

 

How do we want to handle that?  Id= eas might include:

 

(1) provide only an @indicator-stime an= d @indicator-etime, and these are the best guess of the reporter of how lon= g to make it valid.  The recipient can decide how and if to honor these.

 

(2) provide another attribute that woul= d suggest an aging policy that the recipient can choose to honor.  Wha= t would we those aging policies?

 

Roman

 

 

From: Harrington, Christopher [mailto:Christopher.Harrington@emc.com] 
Sent: Monday, Dece= mber 23, 2013 10:46 AM
To: Stoecker, Paul=
Cc: Roman D. Danyl= iw; <= a href=3D"mailto:mile@ietf.org">mile@ietf.org
Subject: RE: [mile= ] Describing the time window during which an indicator should be used

 

Yes we do stop looking. A= good example is when NBC.com got hacked a few months ago. We watched for people hitting it while the URL wa= s malicious. Once it was cleaned up we stopped watching for it since it was= a somewhat popular  URL that would fire all the time and bury us in f= alse positives.

 

Indicator aging is an are= a that nobody has a good handle one. Each organization seems to have their = own way of doing things with aging, if they do anything at all. Some commercial threat intel providers use a decrementing counter = based on the last time the indicator was seen. At EMC we make the aging cal= culation based on time since last seen, attribution (if known), kill chain = stage, confidence in the source  and other factors. It’s not automated at this point.

 

We can’t keep all i= ndicators forever. At some point the watch lists and block lists on your Pr= oxy, firewall, etc get too large and the devices start having issues. We ran into this at EMC and had to switch from Proxy blocks for do= mains to DNS RPZ with a sinkhole web servers. There were too many domains i= n the proxy block list. We have tens of thousands. There are indicators tha= t we consider “persistent”. These are indicators that we always want to be alerted about. Generally these ar= e advanced threat / APT and have either been seen in activity involving EMC= or they belong to threat actor groups that we have seen at EMC.

 

Thanks,

 

--Chris

 

From: Stoecker, Paul 
Sent: Monday, Dece= mber 23, 2013 10:26 AM
To: Harrington, Ch= ristopher
Cc: Roman D. Danyl= iw; <= a href=3D"mailto:mile@ietf.org">mile@ietf.org
Subject: Re: [mile= ] Describing the time window during which an indicator should be used

 

I have a question...Do we really stop l= ooking for IOCs whose time has expired?  Like a malicious URL whose ti= me has expired...do you stop looking for that URL?  Let's say that Paul the malware dude got a hold of the IODEF document...I shutdown m= y web server and after the time expired I turned it back on?

 

Just wondering how IOC aging is actuall= y handled?

Sent from my iPhone


On Dec 20, 2013, at 4:57 PM, "Harrington, Christopher" <Ch= ristopher.Harrington@emc.com> wrote:

Hello,

 

Answers inline below.

 

Thanks,

 

--Chris

 

Christopher Harrington Consulting Security Engineer
GSO - Critical Incident Response Center
EMC
174 Middlesex Turnpike
Bedford, MA 01730
781-515-5862 (work)
603-583-1585 (cell)

 

From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Roman D. D= anyliw
Sent: Friday, Dece= mber 20, 2013 4:26 PM
To: mile@ietf.o= rg
Subject: [mile] De= scribing the time window during which an indicator should be used

 

Hello!

 

Ticket #28 (http://trac= .tools.ietf.org/wg/mile/trac/ticket/28) is tracking the need to convey the valid time during which to apply an indicator. &nbs= p;I wanted to solicit from the community the degree of flexibility desired.=   For the purposes of this discussion an indicator is defined as a cla= ss that has an @indicator-uid attribute.

 

** Does this flexibility need to exist = on a per indicator basis?

Example 1, <Assessment indicator-uid= =3D”foo-12345” indicator-valid-stime=3D”2013/12/01 12:00:= 00”>

Yes, a malicious URL woul= d be valid only as long as it is live.

 

** Could it be at the EventData level (= and the time window cascades to all indicators that are children)?

Example 2:, <EventData indicator-sti= me=3D”2013/12/01 12:00:00”> … <Flow> … man= y domain indicators </Flow> … </EventData>

Example 3: <EventData>  R= 30; <IndicatorStartTime>2013/12/01 12:00:00</IndicatorStartTime>= ; … <Flow> … many domain indicators </Flow> …= </EventData>

Yes, you could have multi= ple malware delivery URLs that are all on the same domain. If the Domain is= specified at EvenData level then when it is no longer valid the children would no longer be valid. I hope I explained that right J  I am not sure how it would differ between Example 2 and 3.

 

** Could it be at the Incident level?

Example 4: <Incident>  ̷= 0; <IndicatorStartTime>2013/12/01 12:00:00</IndicatorStartTime>= … many domain indicators </Flow> … </Incident>

If there was only one Ind= icator in an incident it could be. In practical terms this is very unlikely= .

 

Per indicator time information would pr= ovide the most flexibility but would require duplication of the same inform= ation.

 

A time window for indicator validity sp= ecified at the Incident level would not allow for multiple time windows per= indicator.

 

A time window for indicator validity sp= ecified in the EventData class would require nested EventData instances to = convey different time period.  Also, some indicators are only in the Incident class so this approach would be insufficient.  P= erhaps a hybrid approach where this timing information is in the EventData = and IncidentData classes could be possible.

 

Personally I think the sa= fest approach is validity per Indicator.  Validity for parent / child = would be rare and validity per Incident even rarer.

 

One question, how do we r= epresent “still valid”? If I have an indicator that is valid wh= en I send the message how do I know what that time represents?  If I put “12/20/2013 13:00” as the time can you tell if I mean that= it was still valid when I sent the message at that time or that its validi= ty period ended at that time. Those are very different scenarios and critic= ally important for searching / responding to indicator hits.

 

Roman

 

_______________________________________________
mile mailing list
= mile@ietf.org
https://www.ietf.org/mailman/listinfo/mile=

______________________________________= _________
mile mailing list
mile@ietf.org=
https://www.ietf.org/mailman/listinfo/mile

 

--_000_359EC4B99E040048A7131E0F4E113AFC54C39D29marathon_-- From ietf@augustcellars.com Tue Feb 11 11:14:59 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E2AC1A0706 for ; Tue, 11 Feb 2014 11:14:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IjpMqJsJftWR for ; Tue, 11 Feb 2014 11:14:57 -0800 (PST) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) by ietfa.amsl.com (Postfix) with ESMTP id 794DB1A0707 for ; Tue, 11 Feb 2014 11:14:53 -0800 (PST) Received: from Philemon (c-24-17-142-118.hsd1.wa.comcast.net [24.17.142.118]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id CE14F38F26 for ; Tue, 11 Feb 2014 11:14:52 -0800 (PST) From: "Jim Schaad" To: References: <20140211191051.28008.8450.idtracker@ietfa.amsl.com> In-Reply-To: <20140211191051.28008.8450.idtracker@ietfa.amsl.com> Date: Tue, 11 Feb 2014 11:13:09 -0800 Message-ID: <005001cf275d$4f4111e0$edc335a0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQFT90S0B9SyhO3N7Noehk9JRR74FZumy4Qg Content-Language: en-us Subject: [mile] FW: New Version Notification for draft-schaad-mile-iodef-plasma-00.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Feb 2014 19:14:59 -0000 Trever Freeman, myself and Kathleen have been talking about the ability = to integrate the Plasma work into IODEF for doing finer grain = protection. This draft lays out the basic ideas that are being proposed = for that purpose. We have requested a slot at the London meeting to discuss this. Expect the rest of the plasma drafts to be updated this week. Jim > -----Original Message----- > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > Sent: Tuesday, February 11, 2014 11:11 AM > To: Jim Schaad; Jim Schaad > Subject: New Version Notification for = draft-schaad-mile-iodef-plasma-00.txt >=20 >=20 > A new version of I-D, draft-schaad-mile-iodef-plasma-00.txt > has been successfully submitted by Jim Schaad and posted to the IETF > repository. >=20 > Name: draft-schaad-mile-iodef-plasma > Revision: 00 > Title: Plasma Protected IODEF > Document date: 2014-02-11 > Group: Individual Submission > Pages: 26 > URL: = http://www.ietf.org/internet-drafts/draft-schaad-mile-iodef- > plasma-00.txt > Status: = https://datatracker.ietf.org/doc/draft-schaad-mile-iodef-plasma/ > Htmlized: = http://tools.ietf.org/html/draft-schaad-mile-iodef-plasma-00 >=20 >=20 > Abstract: > The Incident Object Description Exchange Format (IODEF) defines a = XML > representation for information about computer security incidents. > The driver for the standardization effort for IODEF is the desire = to > share the information as part of the cybersecurity response. As = the > security considerations of RFC5070 notes, the data can be sensitive > and should only be disclosed to appropriate parties. This document > describes how to use the Plasma policy enforcement model to ensure > access to the IODEF data follows the appropriate policies in a > distributed environment and independent of the transports used to > share the information. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat From rdd@cert.org Tue Feb 11 11:23:08 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8724A1A0718 for ; Tue, 11 Feb 2014 11:23:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.301 X-Spam-Level: X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0PDNso4CRkmQ for ; Tue, 11 Feb 2014 11:23:05 -0800 (PST) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) by ietfa.amsl.com (Postfix) with ESMTP id 4A78D1A0707 for ; Tue, 11 Feb 2014 11:23:05 -0800 (PST) Received: from pawpaw.sei.cmu.edu (pawpaw.sei.cmu.edu [10.64.21.22]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1BJN4ST030358 for ; Tue, 11 Feb 2014 14:23:04 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1392146584; bh=9yXhErGoDvJBY3xamhLy6n+FbkdIYzUjZcWwsVI5kuc=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=HyRv8KmluxF/wfPpU5Zg7vViALb1mhmWrBYpFzYMkwvYzP86lX551Toj4Bmch/P4E 7tpjqHlq6AMgCzNXn8zLXCliSRvLaS6MwBOl4A6L+emxSWeH2ts9JJDcWmZpnfnPrD 5sQNFeCcLoDURTFAqen33O9p+d1CWdCgDc4HQGTU= Received: from CASCADE.ad.sei.cmu.edu (cascade.sei.cmu.edu [10.64.28.248]) by pawpaw.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1BJN8lY011417 for ; Tue, 11 Feb 2014 14:23:08 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.02.0347.000; Tue, 11 Feb 2014 14:23:04 -0500 From: "Roman D. Danyliw" To: "mile@ietf.org" Thread-Topic: Completeness of Incident@purpose Thread-Index: Ac8nXjW/WD2DWyfgRoC0sR8m8piqhQ== Date: Tue, 11 Feb 2014 19:23:03 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC54C39E17@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [mile] Completeness of Incident@purpose X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Feb 2014 19:23:08 -0000 Hello! Issue #17 (http://trac.tools.ietf.org/wg/mile/trac/ticket/17) is tracking t= he need to review the completeness of Incident@purpose of 5070bis. As of d= raft -05, this attribute is defined as follows: 1. traceback. The document was sent for trace-back purposes. 2. mitigation. The document was sent to request aid in mitigating the des= cribed activity. 3. reporting. The document was sent to comply with reporting requirements= . 4. watch. The document was sent to convey indicators to watch for particu= lar activity. 5. other. The document was sent for purposes specified in the Expectation= class. 6. ext-value. An escape value used to extend this attribute. See Section= 5.1. Does the community have a need to add any additional values? Roman From kathleen.moriarty@emc.com Tue Feb 11 12:40:43 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 378091A0736 for ; Tue, 11 Feb 2014 12:40:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.549 X-Spam-Level: X-Spam-Status: No, score=-2.549 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.548, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7gNUvNFRWfoZ for ; Tue, 11 Feb 2014 12:40:40 -0800 (PST) Received: from mailuogwhop.emc.com (mailuogwhop.emc.com [168.159.213.141]) by ietfa.amsl.com (Postfix) with ESMTP id 9D9C21A0732 for ; Tue, 11 Feb 2014 12:40:40 -0800 (PST) Received: from maildlpprd04.lss.emc.com (maildlpprd04.lss.emc.com [10.253.24.36]) by mailuogwprd01.lss.emc.com (Sentrion-MTA-4.3.0/Sentrion-MTA-4.3.0) with ESMTP id s1BKec0h020473 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Tue, 11 Feb 2014 15:40:38 -0500 X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd01.lss.emc.com s1BKec0h020473 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=emc.com; s=jan2013; t=1392151238; bh=arGKx6Hgd/z90p8nXNItI3OY5Wg=; h=From:To:Date:Subject:Message-ID:References:In-Reply-To: Content-Type:Content-Transfer-Encoding:MIME-Version; b=H8J+SalPcg7KsNa+6zNtYSilHOq4Tcaxl8YpKZLjR3ydsH60Th1pjHBuFzsrO+gHD hyIzeL3Cvwwl+aDjqr7IEcnzVqEoo1fhbbmaIFoxatimov6wnwF7M13QpCTp0Lrvsm GpPQ7E7uM6ksOzxodV8hHS/Fi9Z1/kAyzuyPTsDg= X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd01.lss.emc.com s1BKec0h020473 Received: from mailusrhubprd01.lss.emc.com (mailusrhubprd01.lss.emc.com [10.253.24.19]) by maildlpprd04.lss.emc.com (RSA Interceptor) for ; Tue, 11 Feb 2014 12:40:19 -0800 Received: from mxhub32.corp.emc.com (mxhub32.corp.emc.com [128.222.70.172]) by mailusrhubprd01.lss.emc.com (Sentrion-MTA-4.3.0/Sentrion-MTA-4.3.0) with ESMTP id s1BKeIcm021038 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Tue, 11 Feb 2014 15:40:19 -0500 Received: from mx15a.corp.emc.com ([169.254.1.167]) by mxhub32.corp.emc.com ([128.222.70.172]) with mapi; Tue, 11 Feb 2014 15:40:18 -0500 From: "Moriarty, Kathleen" To: "mile@ietf.org" Date: Tue, 11 Feb 2014 15:40:15 -0500 Thread-Topic: New Version Notification for draft-moriarty-mile-implementreport-00.txt Thread-Index: Ac8naImfmp6vrK8+RpiH+Sj0Xq0GMgAAB/YQ Message-ID: References: <20140211203324.2882.1517.idtracker@ietfa.amsl.com> In-Reply-To: <20140211203324.2882.1517.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Sentrion-Hostname: mailusrhubprd01.lss.emc.com X-RSA-Classifications: public X-Mailman-Approved-At: Tue, 11 Feb 2014 12:42:18 -0800 Subject: [mile] FW: New Version Notification for draft-moriarty-mile-implementreport-00.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Feb 2014 20:40:43 -0000 VGhlIEltcGxlbWVudGF0aW9uIHJlcG9ydCBkcmFmdCBoYXMgYmVlbiBwb3N0ZWQgYW5kIGluY2x1 ZGVzIHN1Ym1pc3Npb25zIGZyb20gc2V2ZXJhbCB2ZW5kb3JzLCBvcmdhbml6YXRpb25zLCBhbmQg cmVzZWFyY2hlcnMgd2hvIGhhdmUgaW1wbGVtZW50ZWQgb3IgUExBTiB0byBpbXBsZW1lbnQgTUlM RSBvciBJTkNIIHN0YW5kYXJkcy4NCg0KSWYgYW55b25lIHdvdWxkIGxpa2UgdG8gaGF2ZSBhIHNl Y3Rpb24gYWRkZWQsIHBsZWFzZSBzZW5kIHRoZSBjb250ZW50IHRvIG1lIGFzIHRoZSBlZGl0b3Iu ICBJZiBhZGRpdGlvbmFsIHJlcG9ydHMgYXJlIHJlY2VpdmVkIGJlZm9yZSBGcmlkYXkgKGRyYWZ0 IHN1Ym1pc3Npb24gY3V0LW9mZiBwcmlvciB0byB0aGUgTG9uZG9uIG1lZXRpbmcgdGhlIHdlZWsg b2YgTWFyY2ggM3JkKSwgSSB3aWxsIGFkZCBpdCB0byB0aGUgcmVwb3J0IGFuZCBwb3N0IGEgbmV3 IHZlcnNpb24uICBTdWJtaXNzaW9ucyByZWNlaXZlZCBhZnRlciB0aGF0IGRhdGUgd2lsbCBiZSBh ZGRlZCB3aGVuIHRoZSBzdWJtaXNzaW9uIHdpbmRvdyBmb3IgZHJhZnRzIGlzIG9wZW4uDQoNClRo YW5rIHlvdSB0byBhbGwgb2YgdGhvc2Ugd2hvIHByb3ZpZGVkIGNvbnRlbnQgYW5kIHdvcmtlZCBo YXJkIG9uIGltcGxlbWVudGF0aW9ucyENCg0KQmVzdCByZWdhcmRzLA0KS2F0aGxlZW4NCg0KLS0t LS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyBb bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZ10gDQpTZW50OiBUdWVzZGF5LCBGZWJydWFy eSAxMSwgMjAxNCAzOjMzIFBNDQpUbzogTW9yaWFydHksIEthdGhsZWVuOyBNb3JpYXJ0eSwgS2F0 aGxlZW4NClN1YmplY3Q6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtbW9yaWFy dHktbWlsZS1pbXBsZW1lbnRyZXBvcnQtMDAudHh0DQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJLUQs IGRyYWZ0LW1vcmlhcnR5LW1pbGUtaW1wbGVtZW50cmVwb3J0LTAwLnR4dA0KaGFzIGJlZW4gc3Vj Y2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBLYXRobGVlbiBNb3JpYXJ0eSBhbmQgcG9zdGVkIHRvIHRo ZSBJRVRGIHJlcG9zaXRvcnkuDQoNCk5hbWU6CQlkcmFmdC1tb3JpYXJ0eS1taWxlLWltcGxlbWVu dHJlcG9ydA0KUmV2aXNpb246CTAwDQpUaXRsZToJCU1JTEUgSW1wbGVtZW50YXRpb24gUmVwb3J0 DQpEb2N1bWVudCBkYXRlOgkyMDE0LTAyLTExDQpHcm91cDoJCUluZGl2aWR1YWwgU3VibWlzc2lv bg0KUGFnZXM6CQk5DQpVUkw6ICAgICAgICAgICAgaHR0cDovL3d3dy5pZXRmLm9yZy9pbnRlcm5l dC1kcmFmdHMvZHJhZnQtbW9yaWFydHktbWlsZS1pbXBsZW1lbnRyZXBvcnQtMDAudHh0DQpTdGF0 dXM6ICAgICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtbW9yaWFy dHktbWlsZS1pbXBsZW1lbnRyZXBvcnQvDQpIdG1saXplZDogICAgICAgaHR0cDovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtbW9yaWFydHktbWlsZS1pbXBsZW1lbnRyZXBvcnQtMDANCg0KDQpB YnN0cmFjdDoNCiAgIFRoaXMgZG9jdW1lbnQgaXMgYSBjb2xsZWN0aW9uIG9mIGltcGxlbWVudGF0 aW9uIHJlcG9ydHMgZnJvbSB2ZW5kb3JzLA0KICAgY29uc29ydGl1bXMsIGFuZCByZXNlYXJjaGVy cyB3aG8gaGF2ZSBpbXBsZW1lbnRlZCBvbmUgb3IgbW9yZSBvZiB0aGUNCiAgIHN0YW5kYXJkcyBw dWJsaXNoZWQgZnJvbSB0aGUgSUVURiBJTkNpZGVudCBIYW5kbGluZyAoSU5DSCkgYW5kDQogICBN YW5hZ2VtZW50IEluY2lkZW50IExpZ2h0d2VpZ2h0IEV4Y2hhbmdlIChNSUxFKSB3b3JraW5nIGdy b3Vwcy4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KDQoNClBsZWFzZSBub3RlIHRoYXQg aXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Np b24gdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0 b29scy5pZXRmLm9yZy4NCg0KVGhlIElFVEYgU2VjcmV0YXJpYXQNCg0KDQo= From john_richardson@symantec.com Wed Feb 12 07:55:28 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54A751A0547 for ; Wed, 12 Feb 2014 07:55:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.448 X-Spam-Level: X-Spam-Status: No, score=-7.448 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.548, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1aSmlx_VE5c8 for ; Wed, 12 Feb 2014 07:55:22 -0800 (PST) Received: from tus1smtoutpex01.symantec.com (tus1smtoutpex01.symantec.com [216.10.195.241]) by ietfa.amsl.com (Postfix) with ESMTP id 3296D1A0545 for ; Wed, 12 Feb 2014 07:55:22 -0800 (PST) X-AuditID: d80ac3f1-b7fc98e0000007b9-95-52fb9968f25c Received: from ecl1mtahubpin01.ges.symantec.com (ecl1mtahubpin01.ges.symantec.com [10.48.69.201]) by tus1smtoutpex01.symantec.com (Symantec Brightmail Gateway out) with SMTP id 87.6E.01977.8699BF25; Wed, 12 Feb 2014 15:55:20 +0000 (GMT) Received: from [155.64.220.138] (helo=TUS1XCHHUBPIN02.SYMC.SYMANTEC.COM) by ecl1mtahubpin01.ges.symantec.com with esmtp (Exim 4.76) (envelope-from ) id 1WDc9g-0006PO-0o for mile@ietf.org; Wed, 12 Feb 2014 15:55:20 +0000 Received: from TUS1XCHEVSPIN39.SYMC.SYMANTEC.COM ([155.64.220.158]) by TUS1XCHHUBPIN02.SYMC.SYMANTEC.COM ([155.64.220.138]) with mapi; Wed, 12 Feb 2014 07:55:19 -0800 From: John Richardson To: "mile@ietf.org" Date: Wed, 12 Feb 2014 07:51:13 -0800 Thread-Topic: re: [mile] CPE and SWID Thread-Index: Ac8oCj1XhO1jXPozTEGc3c5koit/Dg== Message-ID: <1AD43422943F5B4E89EF766D28DCA2EA0BF9D894CE@TUS1XCHEVSPIN39.SYMC.SYMANTEC.COM> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_1AD43422943F5B4E89EF766D28DCA2EA0BF9D894CETUS1XCHEVSPIN_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupgkeLIzCtJLcpLzFFi42LhMnA9qZsx83eQwemb1hZ7/vcxOTB6LFny kymAMYrLJiU1J7MstUjfLoErY/3cdvaCI21MFQ/v7mVqYPzxhLGLkZNDQsBE4sSMJhYIW0zi wr31bF2MXBxCAu8YJWZc2wPlNDJJPNn/kxHCWcUo8XLXHbAWNqD27Wdb2EFsEQFliYtn+5m6 GDk4WARUJXZu4AUJCwsoSNxc/ooFokRVYuKke8wQtp7Evv5XTCA2r0CUxLO3x8BsRqArvp9a A2YzC4hL3HoynwniOgGJJXvOM0PYohIvH/9jhagXlbjTvp4Roj5fYsX6y8wQMwUlTs58wjKB UXgWklGzkJTNQlIGEdeRWLD7ExuErS2xbOFrZhj7zIHHTMjiCxjZVzHKlJQWGxbnluSXlhSk VhgY6hVX5iYCYydZLzk/dxMjMH5ucB3+uIPx+lLFQ4wCHIxKPLzbJvwOEmJNLAOqPMQowcGs JMJr1AwU4k1JrKxKLcqPLyrNSS0+xCjNwaIkzrskfUWQkEB6YklqdmpqQWoRTJaJg1OqgXGC U3mSfnrYj8I/t/5b9G7M5FERXxASaPUt/VdOV/MOp6pu8zObl65ylby/8xOLwxlX24qtHAll Yb5cK6KWz5yy4xjXo8bD7ZumCjJzpmhbvZP4oc+/7IziMedX/JfFT+vUTBG+tTp30cPo7o3f vnHmrAq/fXx67eN859P5WhlVoVOdzhgnHVViKc5INNRiLipOBAAExwLNmwIAAA== Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Feb 2014 15:56:14 -0000 --_000_1AD43422943F5B4E89EF766D28DCA2EA0BF9D894CETUS1XCHEVSPIN_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Everyone, I added myself to the this list so that I can comment on SWID tags on this = thread from a Symantec perspective. Hopefully my response will be added inl= ine to others on this thread. Symantec has SWID tags conformant to the ISO 19770-2:2009 standard released= in four products - NetBackup 7.0 and later, Endpoint Protection 12.1 and l= ater, Control Compliance Suite 11.0, and Enterprise Vault 9.03 and 10.0 and= later. Symantec has been active in the support and development of the ISO 19770 st= andards for many years with the initial interest in improving the ability S= ymantec customers and partners better manage their Symantec assets using CO= TS SAM tools. Symantec is a founding member of TagVault.org as we see it necessary to hav= e a consistent implementation of tags across publishers along with normaliz= ed data to decrease issues related to the current model where SAM tools use= their own proprietary techniques to discover and identify installed softwa= re on a device, and to report software asset information. Symantec, along with TagVault.org members, are working together to agree on= common guidelines for how to implement tags against baseline use cases to = ensure that if publishers implement tags to these guidelines, COTS tools ca= n use standard algorithms to consistently discover and to identify installe= d software, as well as consistently report software asset information. In the past year or so, the Federal Government interest in SWID tags has in= creased from a security perspective as Dave Waltermire from NIST outlines b= elow. We are actively working with several government agencies, through Tag= Vault.org and along with other TagVault.org members, to ensure that impleme= ntation guidelines for SWID tags developed within TagVault.org align with t= he Federal Government use cases and requirements. For more information on these activities, please see www.tagvault.org. Best Regards, John ________________________________ * From: "Waltermire, David A." > * To: "Moriarty, Kathleen" >, "Roman D. Danyliw" >, "mile at ietf.org" > * Date: Wed, 5 Feb 2014 21:43:46 +0000 * List-id: "Managed Incident Lightweight Exchange, IODEF extensions and = RID exchanges" ________________________________ Changing the subject to reflect the discussion thread. I just saw this message. Here is what I can vouch for as the NIST lead for = these efforts: NIST is continuing to support CPE as it has for the last few years. SCAP an= d a few other efforts are dependent on it, so this is critical. It has not = been defunded. NIST is working with the SWID community to advance the ISO specification ef= forts and to ensure that the necessary implementation guidance for SWID tag= producers and tool consumers is put in place. We see SWID tags as having synergies with the CPE effort. We are looking at= methods to consume SWID tags, as software publishers create them, for use = in auto generating CPEs. This has significant advantages over the current C= PE methodology that largely involves investigating vulnerability reports an= d vendor product pages and documentation to generate CPE names. By generati= ng CPE names in this way we can increase the fidelity and accuracy of the p= roduct data, using less human effort, making product identification informa= tion available as close to the publication of the software as possible. Our long-term plans are to maintain a mapping between SWID and CPE in the N= ational Vulnerability Database. This information does not exist yet, but is= in the planning stages. Such information will provide a transition path fo= r the SCAP community and other that use CPE today to take greater advantage= s of the information that SWID offer including: a more robust product metad= ata model and footprint information including file names, versions, and has= hes. Please let me know if you have any questions. Thanks, Dave > -----Original Message----- > From: mile [mailto:mile-bounces at ietf.org] On Behalf Of Moriarty, Kathl= een > Sent: Monday, January 27, 2014 5:40 PM > To: Roman D. Danyliw; mile at ietf.org > Subject: Re: [mile] @user-agent attribute > > CPE isn't funded anymore and may get folded in SWID. I don't have the > latest on this, but would not want to rely on something that may go away.= Is > anyone aware of the latest on CPE? > > Thanks, > Kathleen > > -----Original Message----- > From: mile [mailto:mile-bounces at ietf.org] On Behalf Of Roman D. Danyli= w > Sent: Monday, January 27, 2014 3:22 PM > To: mile at ietf.org > Subject: [mile] @user-agent attribute > > Hello! > > The -04 schema of 5070bis has the following comment in the definition of > @user-agent in the Application and OperatingSystem classes. > > [begin comment] > "" > [end comment] > > SoftwareType is the complexType used to define System/Application and > Service/OperatingSystem. Lacking documentation in the text and going onl= y > on the name in the schema, it would appear that this attribute is attempt= ing > to describe the "User-Agent" HTTP field per Section 14.43 of RFC2616. If > there is a broader definition, could someone please talk us through it. > > With the addition of the Service/ApplicationHeader there appear to be two > ways to represent a User-Agent. Consider the following XML snippet below= : > > ... > > ... dtype=3D"string">Mozilla/5.0 (Windows NT 6.2; Win64; x64) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 > Safari/537.36 > > ... name=3D"Chrome" user-agent=3D"Mozilla/5.0 (Windows NT 6.2; Win64; x64) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36" > version=3D"32.0.11667"> something > > > A few questions: > ** Does the data model need the @user-agent attribute if > ApplicationHeader can model it? > ** Could @swid (defined as "An identifier that can be used to reference t= his > software") be used for a User-Agent? > ** What implementation guidance should be given about how @user-agent > should be set with Service/OperatingSystem? > > To share my own bias, the Application and OperatingSystem Class are > currently very poorly specified. I don't think we should continue improv= ing > them. Instead, we should reference software through CPE > (http://nvd.nist.gov/cpe.cfm) or similar effort as is possible through th= e SCI- > defined class Platform. For the time being, I would drop @user-agent. > > Roman > _______________________________________________ > mile mailing list > mile at ietf.org > https://www.ietf.org/mailman/listinfo/mile > > _______________________________________________ > mile mailing list > mile at ietf.org > https://www.ietf.org/mailman/listinfo/mile ________________________________ * Follow-Ups: * Re: [mile] CPE and SWID * From: Blibbet * Prev by Date: Re: [mile] Documenting DomainData * Next by Date: Re: [mile] CPE and SWID * Previous by thread: [mile] I-D Action: draft-ietf-mile-rfc5070-bis-05.= txt * Next by thread: Re: [mile] CPE and SWID * Index(es): * Date * Thread Note Well: Messages sent to this mailing list are the opinions of the sende= rs and do not imply endorsement by the IETF. --_000_1AD43422943F5B4E89EF766D28DCA2EA0BF9D894CETUS1XCHEVSPIN_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Everyone,

 

I= added myself to the this list so that I can comment on SWID tags on this t= hread from a Symantec perspective. Hopefully my response will be added inli= ne to others on this thread.

 = ;

Symantec has SWID tags conformant to the IS= O 19770-2:2009 standard released in four products – NetBackup 7.0 and= later, Endpoint Protection 12.1 and later, Control Compliance Suite 11.0, = and Enterprise Vault 9.03 and 10.0 and later.

 

Symantec has been active i= n the support and development of the ISO 19770 standards for many years wit= h the initial interest in improving the ability Symantec customers and part= ners better manage their Symantec assets using COTS SAM tools. <= /p>

 

Symantec = is a founding member of TagVault.org as we see it necessary to have a consi= stent implementation of tags across publishers along with normalized data t= o decrease issues related to the current model where SAM tools use their ow= n proprietary techniques to discover and identify installed software on a d= evice, and to report software asset information.

 

Symantec, along with Ta= gVault.org members, are working together to agree on common guidelines for = how to implement tags against baseline use cases to ensure that if publishe= rs implement tags to these guidelines, COTS tools can use standard algorith= ms to consistently discover and to identify installed software, as well as = consistently report software asset information.

 

In the past year or so, = the Federal Government interest in SWID tags has increased from a security = perspective as Dave Waltermire from NIST outlines below. We are actively wo= rking with several government agencies, through TagVault.org and along with= other TagVault.org members, to ensure that implementation guidelines for S= WID tags developed within TagVault.org align with the Federal Government us= e cases and requirements.

 

For more information on these activities, plea= se see www.tagvault.org.=

 

Best Reg= ards,

 

John

 

Changing the subject to reflect the discuss=
ion thread.
 
I just saw thi=
s message. Here is what I can vouch for as the NIST lead for these efforts:=

 
NIST is continuing to sup=
port CPE as it has for the last few years. SCAP and a few other efforts are=
 dependent on it, so this is critical. It has not been defunded.=

 
NIST is working with the SWID commun=
ity to advance the ISO specification efforts and to ensure that the necessa=
ry implementation guidance for SWID tag producers and tool consumers is put=
 in place.
 
We see SWID tag=
s as having synergies with the CPE effort. We are looking at methods to con=
sume SWID tags, as software publishers create them, for use in auto generat=
ing CPEs. This has significant advantages over the current CPE methodology =
that largely involves investigating vulnerability reports and vendor produc=
t pages and documentation to generate CPE names. By generating CPE names in=
 this way we can increase the fidelity and accuracy of the product data, us=
ing less human effort, making product identification information available =
as close to the publication of the software as possible.
 
Our long-term plans are to maintain a mappin=
g between SWID and CPE in the National Vulnerability Database. This informa=
tion does not exist yet, but is in the planning stages. Such information wi=
ll provide a transition path for the SCAP community and other that use CPE =
today to take greater advantages of the information that SWID offer includi=
ng: a more robust product metadata model and footprint information includin=
g file names, versions, and hashes.
 <=
/pre>
Please let me know if you have any questions.
 
Thanks,
Dave<=
/pre>
 
 
&nbs=
p;
> -----Original Message-----
>=
; From: mile [mailto:mile-bounces at ie=
tf.org] On Behalf Of Moriarty, Kathleen
> Sent: Mon=
day, January 27, 2014 5:40 PM
> To: Roman D. Danyli=
w; mile at ietf.org
> Subject: Re: [mile] @user-age=
nt attribute
> 
> CPE isn't=
 funded anymore and may get folded in SWID.  I don't have the
> latest on this, but would not want to rely on something t=
hat may go away.  Is
> anyone aware of the lat=
est on CPE?
> 
> Thanks,
> Kathleen
> 
> -----Original Message-----
> From: mile =
[mailto:mile-bounces at ietf.org] On Be=
half Of Roman D. Danyliw
> Sent: Monday, January 27=
, 2014 3:22 PM
> To: mile at ietf.org
> Subject: [mile] @user-agent attribute
>=
; 
> Hello!
> 
> The -04 schema of 5070bis has the following comment in the de=
finition of
> @user-agent in the Application and Op=
eratingSystem classes.
> 
>=
 [begin comment]
> "<!-- CHANGE: Should Use=
rAgent or HTTPUserAgent fit in SoftwareTypes?
> Thi=
s is typically intended to mean servers, but the category seems more
> appropriate than others.-->"
> [end comment]
> 
> =
SoftwareType is the complexType used to define System/Application and<=
/o:p>
> Service/OperatingSystem.  Lacking documentation i=
n the text and going only
> on the name in the sche=
ma, it would appear that this attribute is attempting
=
> to describe the "User-Agent" HTTP field per Section 14.43 of=
 RFC2616.  If
> there is a broader definition,=
 could someone please talk us through it.
> 
> With the addition of the Service/ApplicationHeader ther=
e appear to be two
> ways to represent a User-Agent=
.  Consider the following XML snippet below:
>=
 
> <System>...
> <=
;Service ip_protocol=3D"80">
> ... <=
;ApplicationHeader proto=3D"80" field=3D"User-Agent"
> dtype=3D"string">Mozilla/5.0 (Windows =
NT 6.2; Win64; x64)
> AppleWebKit/537.36 (KHTML, li=
ke Gecko) Chrome/32.0.1667.0
> Safari/537.36</Ap=
plicationApplication>
> 
&g=
t; ... <Application swid=3D"xxx" configid=3D"xxx" ve=
ndor=3D"Google"
> name=3D"Chrome&quo=
t; user-agent=3D"Mozilla/5.0 (Windows NT 6.2; Win64; x64)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Saf=
ari/537.36"
> version=3D"32.0.11667"=
> <URL>something</URL> </Application> </Service>=

> </System>
> <=
/o:p>
> A few questions:
> ** Does the=
 data model need the @user-agent attribute if
> App=
licationHeader can model it?
> ** Could @swid (defi=
ned as "An identifier that can be used to reference this
> software") be used for a User-Agent?
> ** What implementation guidance should be given about how @user-agent=

> should be set with Service/OperatingSystem?=

> 
> To share my own bias, the =
Application and OperatingSystem Class are
> current=
ly very poorly specified.  I don't think we should continue improving<=
o:p>
> them.  Instead, we should reference software=
 through CPE
> (http://nvd.nist.gov/cpe.cfm) or similar effort as is possible thro=
ugh the SCI-
> defined class Platform.  For th=
e time being, I would drop @user-agent.
> 
> Roman
> _________________________=
______________________
> mile mailing list
> mile at ietf.org
> https://www.ietf.org/mailman/listi=
nfo/mile
> 
> _________=
______________________________________
> mile maili=
ng list
> mile at ietf.org
>=
; https://www.ietf.o=
rg/mailman/listinfo/mile
= --_000_1AD43422943F5B4E89EF766D28DCA2EA0BF9D894CETUS1XCHEVSPIN_-- From kathleen.moriarty@emc.com Wed Feb 12 09:57:43 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E1191A061C for ; Wed, 12 Feb 2014 09:57:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.548 X-Spam-Level: X-Spam-Status: No, score=-2.548 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.548, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GHjoNcoiEXMc for ; Wed, 12 Feb 2014 09:57:40 -0800 (PST) Received: from mailuogwdur.emc.com (mailuogwdur.emc.com [128.221.224.79]) by ietfa.amsl.com (Postfix) with ESMTP id A4FB81A0601 for ; Wed, 12 Feb 2014 09:57:39 -0800 (PST) Received: from maildlpprd56.lss.emc.com (maildlpprd56.lss.emc.com [10.106.48.160]) by mailuogwprd54.lss.emc.com (Sentrion-MTA-4.3.0/Sentrion-MTA-4.3.0) with ESMTP id s1CHvc1I005383 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 12 Feb 2014 12:57:38 -0500 X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd54.lss.emc.com s1CHvc1I005383 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=emc.com; s=jan2013; t=1392227858; bh=mkD8ou9I1+frlogSYxwUNkZoFbA=; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; b=O6zv9LLcvIGIddEYd65J0brHPJ0fg8WpREsbq82WfnPDwzyPKA5+PilvV2k82QDV8 a7kT+82BTGjbTQ0DUjG0a8kHudJaVGmzIEIqCNzvkoIjpKnjS6Drm05/nspkbxxTWt nhZYb81HdF8UTfAMeN2U8iK3u/vJGYGO55zdI30o= X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd54.lss.emc.com s1CHvc1I005383 Received: from mailusrhubprd04.lss.emc.com (mailusrhubprd04.lss.emc.com [10.253.24.22]) by maildlpprd56.lss.emc.com (RSA Interceptor) for ; Wed, 12 Feb 2014 12:57:25 -0500 Received: from mxhub05.corp.emc.com (mxhub05.corp.emc.com [128.222.70.202]) by mailusrhubprd04.lss.emc.com (Sentrion-MTA-4.3.0/Sentrion-MTA-4.3.0) with ESMTP id s1CHvP7O011563 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Wed, 12 Feb 2014 12:57:25 -0500 Received: from mx15a.corp.emc.com ([169.254.1.167]) by mxhub05.corp.emc.com ([128.222.70.202]) with mapi; Wed, 12 Feb 2014 12:57:25 -0500 From: "Moriarty, Kathleen" To: "mile@ietf.org" Date: Wed, 12 Feb 2014 12:57:24 -0500 Thread-Topic: CSIRT Tools/Product showcase at IETF Bits and Bytes Thread-Index: Ac8oG+IEVUFaOywbQ76jtPfdlDJmwg== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_F5063677821E3B4F81ACFB7905573F24065A5E9C77MX15Acorpemcc_" MIME-Version: 1.0 X-Sentrion-Hostname: mailusrhubprd04.lss.emc.com X-RSA-Classifications: public X-Mailman-Approved-At: Wed, 12 Feb 2014 09:59:31 -0800 Subject: [mile] CSIRT Tools/Product showcase at IETF Bits and Bytes X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Feb 2014 17:57:43 -0000 --_000_F5063677821E3B4F81ACFB7905573F24065A5E9C77MX15Acorpemcc_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, At the upcoming IETF meeting, there will be a Bits and Bites showcase on Ma= rch 6th from 19:00-21:00. I was asked if tools and products implemented to= assist CSIRT teams using IETF protocols could be showcased at the event. = If any of you are interested in showcasing your tools or products at the ev= ent, more information can be found at the link below: http://www.ietf.org/meeting/89/bits-n-bites.html IETF protocols may include those developed in MILE, IPFIX, XMPP, MARF or ot= her related working groups. Please let me know if you are working to get a table in addition to the ISO= C so that we may be able to coordinate between vendors or implementers, etc= . There will be about 1,200 engineers attending from more than 40 countries. = It would be great to show the progress we have made so far in this space. Thank you, Kathleen --_000_F5063677821E3B4F81ACFB7905573F24065A5E9C77MX15Acorpemcc_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello,

 

At the = upcoming IETF meeting, there will be a Bits and Bites showcase on March 6th from 19:00-21:00.  I was asked if tools and products imple= mented to assist CSIRT teams using IETF protocols could be showcased at the= event.  If any of you are interested in showcasing your tools or prod= ucts at the event, more information can be found at the link below:

 

http://www.ietf.org= /meeting/89/bits-n-bites.html

&= nbsp;

IETF protocols may include those develo= ped in MILE, IPFIX, XMPP, MARF or other related working groups.<= /p>

 

Please le= t me know if you are working to get a table in addition to the ISOC so that= we may be able to coordinate between vendors or implementers, etc.  <= o:p>

 

There will be about 1,200 engineers attending from more than 40 countries= .  It would be great to show the progress we have made so far in this = space.

 

Thank you,

Kathleen<= /p>

= --_000_F5063677821E3B4F81ACFB7905573F24065A5E9C77MX15Acorpemcc_-- From stevek@tagvault.org Wed Feb 12 10:35:58 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 723A11A0658 for ; Wed, 12 Feb 2014 10:35:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4EC7uZ0UPgdQ for ; Wed, 12 Feb 2014 10:35:46 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1blp0186.outbound.protection.outlook.com [207.46.163.186]) by ietfa.amsl.com (Postfix) with ESMTP id 0B2351A0614 for ; Wed, 12 Feb 2014 10:35:45 -0800 (PST) Received: from BN1PR04MB060.namprd04.prod.outlook.com (10.255.203.28) by BN1PR04MB060.namprd04.prod.outlook.com (10.255.203.28) with Microsoft SMTP Server (TLS) id 15.0.868.8; Wed, 12 Feb 2014 18:35:42 +0000 Received: from BN1PR04MB060.namprd04.prod.outlook.com ([169.254.14.121]) by BN1PR04MB060.namprd04.prod.outlook.com ([169.254.14.43]) with mapi id 15.00.0868.013; Wed, 12 Feb 2014 18:35:41 +0000 From: Steve Klos To: "mile@ietf.org" Thread-Topic: [mile] CPE and SWID Thread-Index: AQHPKAr7E8H7b2A4I0eaklYYfouQnJqx8gkA Date: Wed, 12 Feb 2014 18:35:41 +0000 Message-ID: <712781def40546adb55cd46452154f43@BN1PR04MB060.namprd04.prod.outlook.com> References: <1AD43422943F5B4E89EF766D28DCA2EA0BF9D894CE@TUS1XCHEVSPIN39.SYMC.SYMANTEC.COM> In-Reply-To: <1AD43422943F5B4E89EF766D28DCA2EA0BF9D894CE@TUS1XCHEVSPIN39.SYMC.SYMANTEC.COM> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [98.248.97.172] x-forefront-prvs: 01208B1E18 x-forefront-antispam-report: SFV:NSPM; SFS:(10019001)(189002)(199002)(124975003)(377454003)(53754006)(13464003)(51704005)(164054003)(50986001)(47976001)(47736001)(49866001)(15202345003)(56776001)(69226001)(81342001)(4396001)(16601075003)(19300405004)(81542001)(95416001)(54316002)(83072002)(85852003)(92566001)(47446002)(74662001)(74502001)(90146001)(56816005)(74706001)(94316002)(81686001)(54356001)(74366001)(53806001)(2656002)(19580405001)(76786001)(83322001)(19580395003)(87266001)(74316001)(93516002)(76796001)(80976001)(76576001)(16236675002)(15975445006)(33646001)(81816001)(80022001)(31966008)(555904002)(65816001)(87936001)(76482001)(94946001)(77096001)(59766001)(86362001)(85306002)(74876001)(93136001)(77982001)(66066001)(51856001)(79102001)(95666001)(46102001)(63696002)(21314002)(24736002)(559001)(579004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB060; H:BN1PR04MB060.namprd04.prod.outlook.com; CLIP:98.248.97.172; FPR:C30CF117.A4EA5FCC.BAD3713B.C2E8DB61.20A97; InfoNoRecordsMX:1; A:1; LANG:en; Content-Type: multipart/alternative; boundary="_000_712781def40546adb55cd46452154f43BN1PR04MB060namprd04pro_" MIME-Version: 1.0 X-OriginatorOrg: tagvault.org Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Feb 2014 18:35:58 -0000 --_000_712781def40546adb55cd46452154f43BN1PR04MB060namprd04pro_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Quite a number of issues addressed in this e-mail - I apologize for the len= gth, but wanted to provide background for anyone new and try to provide som= e insight on various issues that have recently been raised in the MILE dist= ribution list. David Waltermire has done a great job discussing many of th= ese issues, and David's been great in providing feedback on real-world use = case validation for SWID tags that have made the standard and best practice= s guides better and more complete. However, there are numerous use cases f= or SWID tags including many that are outside the scope of what many on this= list may be aware of, so forgive me if I end up repeating information you = already know. Full disclosure - my name is Steve Klos and I work for a non-profit organiz= ation that is tasked with evangelizing and providing certification efforts = for SWID tags based on the ISO/IEC 19770-2 standard. I do absolutely have = an agenda - I want to see more effective and automated management of IT ope= rations when it comes to software security, compliance and logistics. The = primary platforms the program is focused on are notebooks, desktops, tablet= s, minis, mainframes, cloud and virtual systems and includes support for an= y publisher on any platform. It is possible that the SWID tags may be usef= ul in a wider range of mobile systems as well, but the use cases have not y= et been fully evaluated in that space. The overall cost to include SWID tags as part of a software development pro= ject is absolutely trivial and the process is designed to be completely man= aged within a software publisher's infrastructure, so there are no critical= path issues that get between a publisher and a software release. SWID tag= s are also designed for use within customer environments so IT developed so= ftware and software that does not include tags from the publisher can be ta= gged. The uptake of SWID tags is a chicken and egg problem - why do software publ= ishers want to provide SWID tags if tool providers and end-users aren't rea= ding them and why do tool providers create support for SWID tags if publish= ers and end-users are not creating them. Fortunately, we've moved well bey= ond that issue, now it's a matter of how quickly publishers integrate SWID = tags into their development process. Evidence that indicates support for SWID tags in the market include: 1) Publishers see the value of SWID tags both for their internal opera= tions as well as for their customers. More and more publishers have starte= d to include SWID tags in their software, or will in the very near future. = These publishers include EMC, HP, IBM, Microsoft and Symantec. 2) Symantec has been shipping 4 of their enterprise products with SWID= tags. Microsoft has included tags in all new software releases they ship = and they have indicated that they are interested in adding SWID tags to old= er Microsoft products through the patching process. HP has already started= to ship SWID tags. Adobe has been shipping SWID tags since Creative Suite= s 4.0, IBM will be shipping software with SWID tags this year and any Windo= ws based software product that uses InstallShield 2012 or later will automa= tically have SWID tags created and installed as part of the install script.= Windows based software that uses WiX or Advanced Installer will need to i= nclude the option to add SWID tags, but the options are trivially easy to u= se and do not require any additional purchase of a standard, or memberships= to any organizations. 3) Tools that are used to create Microsoft centered installation tools= all support the creation of SWID tags. In fact anyone using InstallShield= 2012 or later will automatically create and install SWID tags as part of t= heir install script. Recognizing that Microsoft software is an important, = but not the complete subset of the devices under management today, everyone= generally recognizes that Microsoft software is a critical majority of the= software in use across a wide spectrum of market stakeholders and this pla= tform needs better automation capabilities for security, compliance and log= istics. Better automation can only be provided when IT shops have authorit= ative information that comes directly from the software publisher or the IT= organization. 4) Tools that are used for discovery support SWID tags today are shown= below: * Aspera * Asset Metrics * CA Technology * Eracent * Express Metrix * Flexera * Hewlett Packard * Magnicomp * Microsoft Assessment and Planning (MAP) * Microsoft SCCM * Sassafras Software * Scalable Software * Software Management.org * Symantec There are many more products adding functionality to support SWID tags at t= he moment: 5) Numerous US Government efforts currently underway are recognizing t= hat a more authoritative software identification effort is required for the= ir success. The inclusion of SWID tags in the Cybersecurity Innovation For= um presentations was seen across the board from IAD, NIST, MITRE and DHS. = There is no other option we are aware of within a standards body that can c= ome close to the fidelity and richness of the information provided by SWID = tags, do it in a way that the publisher has the ability to create the data = internally (and therefore not create a critical path problem for software r= eleases) and also support the authoritative capabilities provided by digita= l signatures. 6) Other standards bodies are incorporating SWID tags in their specifi= cations. DMTF has added it to V2.40 of their CIM schema and will be provid= ing a profile for SWID tags later this quarter. TNC has also incorporated = SWID tags into their specifications and NCCoE sees SWID tags as a fundament= al building block for their reference infrastructure. 7) For those who are concerned about ISO standards being behind a payw= all - ISO has finally made some accommodation to the need to provide certai= n specifications for free. Essentially, standards that are included in rul= emaking documents by the US Government now have open viewer access through = the ANSI Portal. I assume that other national bodies that work with ISO ar= e providing similar portals for their own countries. You can have a look a= t ANSI's portal here - http://ibr.ansi.org/. I would expect that if the 19= 770-2 standard becomes mandated for software being sold into the US governm= ent that the standard would be available for people to access at no charge. 8) There is more effort happening within the FOSS community - primaril= y around the revision for the 19770-2 standard that will provide even more = support for free and open source publishers to use SWID tags to provide add= itional relationship, or link data that will help users identify other rela= ted software components they may be interested in. 9) TagVault.org (the organization I work with) has previously written = a compendium for the 19770-2 standard that allows for anyone to access the = material at no charge. The programs model moving forward is that the stand= ards and documents we create (such as the best practices document that is t= he next document our working group is focused on) will be available for the= public at no charge. Note that the compendium is not currently published = primarily because certification efforts will be done against a best practic= es document being developed by a TagVault.org working group which is curren= tly testing various use cases and requirements at the moment. 10) There has been significant interest in SWID tags from customers in th= e fortune 500. The interest is being driven by the need for more accurate = information from inventory and discovery tools, a need to reconcile data be= tween tools that typically use proprietary data sets and the recognition th= at more, better and consistent automation is required across platforms if t= he IT operations have any hope of keeping up with the pace of change being = pushed by the business. There have been other questions about SWID tags that have been addressed, b= ut seem to keep coming up. Yes, there is a paywall for the ISO standards. However, as indicated by it= em 6 above, ISO and ANSI have recognized that there is a need to make stand= ards more available to vendors who do not have the money available to pay $= 150 for a copy of the standard. There will be other options available for = organizations who do not "need" the official ISO standard - you can use too= ls (open source or paid for), you can use other reference documents (freely= available, provided through training, or provided through association memb= ership), you can access and use the schema directly - which, along with sam= ple SWID tags will provide most of the data developers would require to inc= orporate SWID tags. Anyone has the ability to provide support for SWID tags and there is no res= triction, nor is there a requirement that organizations must buy the standa= rd, or join any organization. TagVault.org is working with larger publishe= rs and end-user organizations to establish a baseline of best practices whi= ch will be made available to anyone for free. SWID tags also do provide a bridge to support CPE names if required, but th= e CPE names that will be created will be curated by the publishers themselv= es and therefore will be normalized, consistent and more importantly can be= directly correlated with software that is installed on a device. There is a new capability that is being added in the 19770-2 revision as we= ll which will allow software publishers to reference a URI that software IT= groups to identify when patches are released and know exactly which softwa= re products the patches are targeted at in such a way that a simple invento= ry of software can identify devices to target for patch installations. Oh,= and patches include SWID tags as well, so identifying if a patch is instal= led is again, simply a matter of checking inventory for a device. I can discuss the benefits and limitations of CPE's for quite a while, but = I believe quite a few of the issues are relatively well known. With the fa= ct that SWID tags are implemented in a wide range of software today with mo= re support on the way, it seems clear that the SCAP infrastructure can bene= fit from working with software publishers instead of trying to manage somet= hing that is not supported by software publishers (in general, most publish= ers do not provide a CPE reference with their software today). It seems that the goals of a standards development organization should be t= o utilize work that is supported by providers (in this case software publis= hers) and that support the use cases of the consumers (in this particular i= nstance we're referencing SCAP/CPE/MILE, etc). With the fact that there ar= e limited resources available to develop standards, it also seems that the = various SDOs should work together to solve bigger problems... This is why = ISO, the DMTF, TNC and TagVault.org (among others) are all working cooperat= ively together. TagVault.org is supportive of the IETF efforts in both the= MILE and SACM efforts and will continue to do what it can to support the e= fforts to improve IT automation by ensuring systems receive authoritative d= ata from validated sources. In the case of SWID tags, the validated source= s should be the publishers as they are the only ones who have any hope of m= anaging the scale of this problem. Regards, Steve Klos From: John Richardson [mailto:john_richardson@symantec.com] Sent: Wednesday, February 12, 2014 7:51 AM To: mile@ietf.org Subject: Re: [mile] CPE and SWID Hi Everyone, I added myself to the this list so that I can comment on SWID tags on this = thread from a Symantec perspective. Hopefully my response will be added inl= ine to others on this thread. Symantec has SWID tags conformant to the ISO 19770-2:2009 standard released= in four products - NetBackup 7.0 and later, Endpoint Protection 12.1 and l= ater, Control Compliance Suite 11.0, and Enterprise Vault 9.03 and 10.0 and= later. Symantec has been active in the support and development of the ISO 19770 st= andards for many years with the initial interest in improving the ability S= ymantec customers and partners better manage their Symantec assets using CO= TS SAM tools. Symantec is a founding member of TagVault.org as we see it necessary to hav= e a consistent implementation of tags across publishers along with normaliz= ed data to decrease issues related to the current model where SAM tools use= their own proprietary techniques to discover and identify installed softwa= re on a device, and to report software asset information. Symantec, along with TagVault.org members, are working together to agree on= common guidelines for how to implement tags against baseline use cases to = ensure that if publishers implement tags to these guidelines, COTS tools ca= n use standard algorithms to consistently discover and to identify installe= d software, as well as consistently report software asset information. In the past year or so, the Federal Government interest in SWID tags has in= creased from a security perspective as Dave Waltermire from NIST outlines b= elow. We are actively working with several government agencies, through Tag= Vault.org and along with other TagVault.org members, to ensure that impleme= ntation guidelines for SWID tags developed within TagVault.org align with t= he Federal Government use cases and requirements. For more information on these activities, please see www.tagvault.org. Best Regards, John ________________________________ * From: "Waltermire, David A." > * To: "Moriarty, Kathleen" >, "Roman D. Danyliw" >, "mile at ietf.org" > * Date: Wed, 5 Feb 2014 21:43:46 +0000 * List-id: "Managed Incident Lightweight Exchange, IODEF extensions and= RID exchanges" ________________________________ Changing the subject to reflect the discussion thread. I just saw this message. Here is what I can vouch for as the NIST lead for = these efforts: NIST is continuing to support CPE as it has for the last few years. SCAP an= d a few other efforts are dependent on it, so this is critical. It has not = been defunded. NIST is working with the SWID community to advance the ISO specification ef= forts and to ensure that the necessary implementation guidance for SWID tag= producers and tool consumers is put in place. We see SWID tags as having synergies with the CPE effort. We are looking at= methods to consume SWID tags, as software publishers create them, for use = in auto generating CPEs. This has significant advantages over the current C= PE methodology that largely involves investigating vulnerability reports an= d vendor product pages and documentation to generate CPE names. By generati= ng CPE names in this way we can increase the fidelity and accuracy of the p= roduct data, using less human effort, making product identification informa= tion available as close to the publication of the software as possible. Our long-term plans are to maintain a mapping between SWID and CPE in the N= ational Vulnerability Database. This information does not exist yet, but is= in the planning stages. Such information will provide a transition path fo= r the SCAP community and other that use CPE today to take greater advantage= s of the information that SWID offer including: a more robust product metad= ata model and footprint information including file names, versions, and has= hes. Please let me know if you have any questions. Thanks, Dave > -----Original Message----- > From: mile [mailto:mile-bounces at ietf.org] On Behalf Of Moriarty, Kathl= een > Sent: Monday, January 27, 2014 5:40 PM > To: Roman D. Danyliw; mile at ietf.org > Subject: Re: [mile] @user-agent attribute > > CPE isn't funded anymore and may get folded in SWID. I don't have the > latest on this, but would not want to rely on something that may go away.= Is > anyone aware of the latest on CPE? > > Thanks, > Kathleen > > -----Original Message----- > From: mile [mailto:mile-bounces at ietf.org] On Behalf Of Roman D. Danyli= w > Sent: Monday, January 27, 2014 3:22 PM > To: mile at ietf.org > Subject: [mile] @user-agent attribute > > Hello! > > The -04 schema of 5070bis has the following comment in the definition of > @user-agent in the Application and OperatingSystem classes. > > [begin comment] > "" > [end comment] > > SoftwareType is the complexType used to define System/Application and > Service/OperatingSystem. Lacking documentation in the text and going onl= y > on the name in the schema, it would appear that this attribute is attempt= ing > to describe the "User-Agent" HTTP field per Section 14.43 of RFC2616. If > there is a broader definition, could someone please talk us through it. > > With the addition of the Service/ApplicationHeader there appear to be two > ways to represent a User-Agent. Consider the following XML snippet below= : > > ... > > ... dtype=3D"string">Mozilla/5.0 (Windows NT 6.2; Win64; x64) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 > Safari/537.36 > > ... name=3D"Chrome" user-agent=3D"Mozilla/5.0 (Windows NT 6.2; Win64; x64) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36" > version=3D"32.0.11667"> something > > > A few questions: > ** Does the data model need the @user-agent attribute if > ApplicationHeader can model it? > ** Could @swid (defined as "An identifier that can be used to reference t= his > software") be used for a User-Agent? > ** What implementation guidance should be given about how @user-agent > should be set with Service/OperatingSystem? > > To share my own bias, the Application and OperatingSystem Class are > currently very poorly specified. I don't think we should continue improv= ing > them. Instead, we should reference software through CPE > (http://nvd.nist.gov/cpe.cfm) or similar effort as is possible through th= e SCI- > defined class Platform. For the time being, I would drop @user-agent. > > Roman > _______________________________________________ > mile mailing list > mile at ietf.org > https://www.ietf.org/mailman/listinfo/mile > > _______________________________________________ > mile mailing list > mile at ietf.org > https://www.ietf.org/mailman/listinfo/mile ________________________________ * Follow-Ups: * Re: [mile] CPE and SWID * From: Blibbet * Prev by Date: Re: [mile] Documenting DomainData * Next by Date: Re: [mile] CPE and SWID * Previous by thread: [mile] I-D Action: draft-ietf-mile-rfc5070-bis-05= .txt * Next by thread: Re: [mile] CPE and SWID * Index(es): * Date * Thread Note Well: Messages sent to this mailing list are the opinions of the sende= rs and do not imply endorsement by the IETF. --_000_712781def40546adb55cd46452154f43BN1PR04MB060namprd04pro_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Quite a number of issues addressed in this e-mail – I apologize for t= he length, but wanted to provide background for anyone new and try to provi= de some insight on various issues that have recently been raised in the MIL= E distribution list.  David Waltermire has done a great job discussing many of these issues, and David’s be= en great in providing feedback on real-world use case validation for SWID t= ags that have made the standard and best practices guides better and more c= omplete.  However, there are numerous use cases for SWID tags including many that are outside the scope of what = many on this list may be aware of, so forgive me if I end up repeating info= rmation you already know.

Full disclosure – my name is Steve Klos and I work for a non-profit o= rganization that is tasked with evangelizing and providing certification ef= forts for SWID tags based on the ISO/IEC 19770-2 standard.  I do absol= utely have an agenda – I want to see more effective and automated management of IT operations when it comes to software securi= ty, compliance and logistics.  The primary platforms the program is fo= cused on are notebooks, desktops, tablets, minis, mainframes, cloud and vir= tual systems and includes support for any publisher on any platform.  It is possible that the SWID tags may= be useful in a wider range of mobile systems as well, but the use cases ha= ve not yet been fully evaluated in that space.

The overall cost to include SWID tags as part of a software development pro= ject is absolutely trivial and the process is designed to be completely man= aged within a software publisher’s infrastructure, so there are no cr= itical path issues that get between a publisher and a software release.  SWID tags are also designed for us= e within customer environments so IT developed software and software that d= oes not include tags from the publisher can be tagged. 

The uptake of SWID tags is a chicken and egg problem – why do softwar= e publishers want to provide SWID tags if tool providers and end-users aren= ’t reading them and why do tool providers create support for SWID tag= s if publishers and end-users are not creating them.  Fortunately, we’ve moved well beyond that issue, now it&= #8217;s a matter of how quickly publishers integrate SWID tags into their d= evelopment process. 

Evidence that indicates support for SWID tags in the market include:

1)      Publishers see the value of SWID tags both for thei= r internal operations as well as for their customers.  More and more p= ublishers have started to include SWID tags in their software, or will in t= he very near future.  These publishers include EMC, HP, IBM, Microsoft and Symantec.

2)      Symantec has been shipping 4 of their enterprise pr= oducts with SWID tags.  Microsoft has included tags in all new softwar= e releases they ship and they have indicated that they are interested in ad= ding SWID tags to older Microsoft products through the patching process.  HP has already started to ship SWID ta= gs.  Adobe has been shipping SWID tags since Creative Suites 4.0, IBM = will be shipping software with SWID tags this year and any Windows based so= ftware product that uses InstallShield 2012 or later will automatically have SWID tags created and installed as part o= f the install script.  Windows based software that uses WiX or Advance= d Installer will need to include the option to add SWID tags, but the optio= ns are trivially easy to use and do not require any additional purchase of a standard, or memberships to any organ= izations.

3)      Tools that are used to create Microsoft centered in= stallation tools all support the creation of SWID tags.  In fact anyon= e using InstallShield 2012 or later will automatically create and install S= WID tags as part of their install script.  Recognizing that Microsoft software is an important, but not the complete = subset of the devices under management today, everyone generally recognizes= that Microsoft software is a critical majority of the software in use acro= ss a wide spectrum of market stakeholders and this platform needs better automation capabilities for security, compl= iance and logistics.  Better automation can only be provided when IT s= hops have authoritative information that comes directly from the software p= ublisher or the IT organization.

4)      Tools that are used for discovery support SWID tags= today are shown below:

•    &nb= sp;  Aspera

•    &nb= sp;  Asset Metrics<= o:p>

•    &nb= sp;  CA Technology<= o:p>

•    &nb= sp;  Eracent

•    &nb= sp;  Express Metrix=

•    &nb= sp;  Flexera

•    &nb= sp;  Hewlett Packar= d

•    &nb= sp;  Magnicomp=

•    &nb= sp;  Microsoft Asse= ssment and Planning (MAP)

•    &nb= sp;  Microsoft SCCM=

•    &nb= sp;  Sassafras Soft= ware

•    &nb= sp;  Scalable Softw= are

•    &nb= sp;  Software Manag= ement.org

•    &nb= sp;  Symantec =

There are many more products adding functionality to support SWID tags at t= he moment:

5)      Numerous US Government efforts currently underway a= re recognizing that a more authoritative software identification effort is = required for their success.  The inclusion of SWID tags in the Cyberse= curity Innovation Forum presentations was seen across the board from IAD, NIST, MITRE and DHS.  There is no= other option we are aware of within a standards body that can come close t= o the fidelity and richness of the information provided by SWID tags, do it= in a way that the publisher has the ability to create the data internally (and therefore not create a critical= path problem for software releases) and also support the authoritative cap= abilities provided by digital signatures.

6)      Other standards bodies are incorporating SWID tags = in their specifications.  DMTF has added it to V2.40 of their CIM sche= ma and will be providing a profile for SWID tags later this quarter.  = TNC has also incorporated SWID tags into their specifications and NCCoE sees SWID tags as a fundamental building block fo= r their reference infrastructure.

7)      For those who are concerned about ISO standards bei= ng behind a paywall - ISO has finally made some accommodation to the need t= o provide certain specifications for free.  Essentially, standards tha= t are included in rulemaking documents by the US Government now have open viewer access through the ANSI Portal.&= nbsp; I assume that other national bodies that work with ISO are providing = similar portals for their own countries.  You can have a look at ANSI&= #8217;s portal here - http://ibr.ansi.org/.  I would ex= pect that if the 19770-2 standard becomes mandated for software being sold = into the US government that the standard would be available for people to a= ccess at no charge.

8)      There is more effort happening within the FOSS comm= unity – primarily around the revision for the 19770-2 standard that w= ill provide even more support for free and open source publishers to use SW= ID tags to provide additional relationship, or link data that will help users identify other related software componen= ts they may be interested in. 

9)      TagVault.org (the organization I work with) has pre= viously written a compendium for the 19770-2 standard that allows for anyon= e to access the material at no charge.  The programs model moving forw= ard is that the standards and documents we create (such as the best practices document that is the next document o= ur working group is focused on) will be available for the public at no char= ge.  Note that the compendium is not currently published primarily bec= ause certification efforts will be done against a best practices document being developed by a TagVault.org workin= g group which is currently testing various use cases and requirements at th= e moment.

10)   There has been significant interest in SWID tags fr= om customers in the fortune 500.  The interest is being driven by the = need for more accurate information from inventory and discovery tools, a ne= ed to reconcile data between tools that typically use proprietary data sets and the recognition that more, better = and consistent automation is required across platforms if the IT operations= have any hope of keeping up with the pace of change being pushed by the bu= siness. 

 

There have been other questions about SWID tags that= have been addressed, but seem to keep coming up.

 

Yes, there is a paywall for the ISO standards. = However, as indicated by item 6 above, ISO and ANSI have recognized that t= here is a need to make standards more available to vendors who do not have = the money available to pay $150 for a copy of the standard.  There will be other options available for organizat= ions who do not “need” the official ISO standard – you ca= n use tools (open source or paid for), you can use other reference document= s (freely available, provided through training, or provided through association membership), you can access and use the schema directl= y – which, along with sample SWID tags will provide most of the data = developers would require to incorporate SWID tags.

 

Anyone has the ability to provide support for SWID t= ags and there is no restriction, nor is there a requirement that organizati= ons must buy the standard, or join any organization.  TagVault.org is = working with larger publishers and end-user organizations to establish a baseline of best practices which will be made= available to anyone for free. 

 

SWID tags also do provide a bridge to support CPE na= mes if required, but the CPE names that will be created will be curated by = the publishers themselves and therefore will be normalized, consistent and = more importantly can be directly correlated with software that is installed on a device.

 

There is a new capability that is being added in the= 19770-2 revision as well which will allow software publishers to reference= a URI that software IT groups to identify when patches are released and kn= ow exactly which software products the patches are targeted at in such a way that a simple inventory of softw= are can identify devices to target for patch installations.  Oh, and p= atches include SWID tags as well, so identifying if a patch is installed is= again, simply a matter of checking inventory for a device.

 

I can discuss the benefits and limitations of CPE= 217;s for quite a while, but I believe quite a few of the issues are relati= vely well known.  With the fact that SWID tags are implemented in a wi= de range of software today with more support on the way, it seems clear that the SCAP infrastructure can benefit from w= orking with software publishers instead of trying to manage something that = is not supported by software publishers (in general, most publishers do not= provide a CPE reference with their software today). 

 

It seems that the goals of a standards development o= rganization should be to utilize work that is supported by providers (in th= is case software publishers) and that support the use cases of the consumer= s (in this particular instance we’re referencing SCAP/CPE/MILE, etc).  With the fact that there are limite= d resources available to develop standards, it also seems that the various = SDOs should work together to solve bigger problems…  This is why= ISO, the DMTF, TNC and TagVault.org (among others) are all working cooperatively together.  TagVault.org is supportive o= f the IETF efforts in both the MILE and SACM efforts and will continue to d= o what it can to support the efforts to improve IT automation by ensuring s= ystems receive authoritative data from validated sources.  In the case of SWID tags, the validated sources s= hould be the publishers as they are the only ones who have any hope of mana= ging the scale of this problem.

 

Regards,

 

Steve Klos

 

From: John Richardson [mailto:john_richardson= @symantec.com]
Sent: Wednesday, February 12, 2014 7:51 AM
To: mile@ietf.org
Subject: Re: [mile] CPE and SWID

 

Hi Everyone,

 

I added myself to the this list so that I can commen= t on SWID tags on this thread from a Symantec perspective. Hopefully my res= ponse will be added inline to others on this thread.

 

Symantec has SWID tags conformant to the ISO 19770-2= :2009 standard released in four products – NetBackup 7.0 and later, E= ndpoint Protection 12.1 and later, Control Compliance Suite 11.0, and Enter= prise Vault 9.03 and 10.0 and later.

 

Symantec has been active in the support and developm= ent of the ISO 19770 standards for many years with the initial interest in = improving the ability Symantec customers and partners better manage their S= ymantec assets using COTS SAM tools.

 

Symantec is a founding member of TagVault.org as we = see it necessary to have a consistent implementation of tags across publish= ers along with normalized data to decrease issues related to the current mo= del where SAM tools use their own proprietary techniques to discover and identify installed software on a de= vice, and to report software asset information.

 

Symantec, along with TagVault.org members, are worki= ng together to agree on common guidelines for how to implement tags against= baseline use cases to ensure that if publishers implement tags to these gu= idelines, COTS tools can use standard algorithms to consistently discover and to identify installed software, as= well as consistently report software asset information.

 

In the past year or so, the Federal Government inter= est in SWID tags has increased from a security perspective as Dave Waltermi= re from NIST outlines below. We are actively working with several governmen= t agencies, through TagVault.org and along with other TagVault.org members, to ensure that implementation guide= lines for SWID tags developed within TagVault.org align with the Federal Go= vernment use cases and requirements.

 

For more information on these activities, please see= www.tagvault.org.

 

Best Regards,

 

John

 

Changing the subject to reflect the discussion thread.

 


I just saw this message. Here is what I can vouch for as the NIST lead=
 for these efforts:


 


NIST is continuing to support CPE as it has for the last few years. SC=
AP and a few other efforts are dependent on it, so this is critical. It has=
 not been defunded.


 


NIST is working with the SWID community to advance the ISO specificati=
on efforts and to ensure that the necessary implementation guidance for SWI=
D tag producers and tool consumers is put in place.


 


We see SWID tags as having synergies with the CPE effort. We are looki=
ng at methods to consume SWID tags, as software publishers create them, for=
 use in auto generating CPEs. This has significant advantages over the curr=
ent CPE methodology that largely involves investigating vulnerability repor=
ts and vendor product pages and documentation to generate CPE names. By gen=
erating CPE names in this way we can increase the fidelity and accuracy of =
the product data, using less human effort, making product identification in=
formation available as close to the publication of the software as possible=
.


 


Our long-term plans are to maintain a mapping between SWID and CPE in =
the National Vulnerability Database. This information does not exist yet, b=
ut is in the planning stages. Such information will provide a transition pa=
th for the SCAP community and other that use CPE today to take greater adva=
ntages of the information that SWID offer including: a more robust product =
metadata model and footprint information including file names, versions, an=
d hashes.


 


Please let me know if you have any questions.


 


Thanks,


Dave


 


 


 


> -----Original Message-----


> From: mile [mailto:mile-bounces at ietf.org] On Behalf Of Moriarty, Kathleen


> Sent: Monday, January 27, 2014 5:40 PM


> To: Roman D. Danyliw; mile at ietf.org


> Subject: Re: [mile] @user-agent attribute


> 


> CPE isn't funded anymore and may get folded in SWID.  I don'=
t have the


> latest on this, but would not want to rely on something that may =
go away.  Is


> anyone aware of the latest on CPE?


> 


> Thanks,


> Kathleen


> 


> -----Original Message-----


> From: mile [mailto:mile-bounces at ietf.org] On Behalf Of Roman D. Danyliw


> Sent: Monday, January 27, 2014 3:22 PM


> To: mile at ietf.org


> Subject: [mile] @user-agent attribute


> 


> Hello!


> 


> The -04 schema of 5070bis has the following comment in the defini=
tion of


> @user-agent in the Application and OperatingSystem classes.<=
/o:p>


> 


> [begin comment]


> "<!-- CHANGE: Should UserAgent or HTTPUserAgent fit in So=
ftwareTypes?


> This is typically intended to mean servers, but the category seem=
s more


> appropriate than others.-->"


> [end comment]


> 


> SoftwareType is the complexType used to define System/Application=
 and


> Service/OperatingSystem.  Lacking documentation in the text =
and going only


> on the name in the schema, it would appear that this attribute is=
 attempting


> to describe the "User-Agent" HTTP field per Section 14.=
43 of RFC2616.  If


> there is a broader definition, could someone please talk us throu=
gh it.


> 


> With the addition of the Service/ApplicationHeader there appear t=
o be two


> ways to represent a User-Agent.  Consider the following XML =
snippet below:


> 


> <System>...


> <Service ip_protocol=3D"80">


> ... <ApplicationHeader proto=3D"80" field=3D"Us=
er-Agent"


> dtype=3D"string">Mozilla/5.0 (Windows NT 6.2; Win64;=
 x64)


> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0


> Safari/537.36</ApplicationApplication>


> 


> ... <Application swid=3D"xxx" configid=3D"xxx&q=
uot; vendor=3D"Google"


> name=3D"Chrome" user-agent=3D"Mozilla/5.0 (Windows=
 NT 6.2; Win64; x64)


> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/=
537.36"


> version=3D"32.0.11667"> <URL>something</URL=
> </Application> </Service>


> </System>


> 


> A few questions:


> ** Does the data model need the @user-agent attribute if


> ApplicationHeader can model it?


> ** Could @swid (defined as "An identifier that can be used t=
o reference this


> software") be used for a User-Agent?


> ** What implementation guidance should be given about how @user-a=
gent


> should be set with Service/OperatingSystem?


> 


> To share my own bias, the Application and OperatingSystem Class a=
re


> currently very poorly specified.  I don't think we should co=
ntinue improving


> them.  Instead, we should reference software through CPE


> (http://nvd.nist.gov/cpe.=
cfm) or similar effort as is possible through the SCI-


> defined class Platform.  For the time being, I would drop @u=
ser-agent.


> 


> Roman


> _______________________________________________


> mile mailing list


> mile at ietf.org


> https://ww=
w.ietf.org/mailman/listinfo/mile


> 


> _______________________________________________


> mile mailing list


> mile at ietf.org


> https://ww=
w.ietf.org/mailman/listinfo/mile












Note Well: Messages sent to this mailing list are the opinions of the=
 senders and do not imply endorsement by the IETF.


 
--_000_712781def40546adb55cd46452154f43BN1PR04MB060namprd04pro_-- From blibbet@gmail.com Wed Feb 12 10:54:32 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 719351A0647 for ; Wed, 12 Feb 2014 10:54:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ycw6BiHTwQUN for ; Wed, 12 Feb 2014 10:54:28 -0800 (PST) Received: from mail-pb0-x233.google.com (mail-pb0-x233.google.com [IPv6:2607:f8b0:400e:c01::233]) by ietfa.amsl.com (Postfix) with ESMTP id 3B5411A062C for ; Wed, 12 Feb 2014 10:54:28 -0800 (PST) Received: by mail-pb0-f51.google.com with SMTP id un15so9667879pbc.10 for ; Wed, 12 Feb 2014 10:54:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=pQ2jGIlxxf9UVAEMe1PjM7LBVrkJDUADw5s6ly5vIUQ=; b=db2CQrsfLCFSvfzgBD/vovp1c7BYkpn9ZCjkg4RVXelkMs/kVg+GTJapWu/+Ashw4W g+l5ASatPSdLJdXxGhwItBFhE181ExdtFiFUBqNzulreqOnl7QFgDDlCLC/3dMvNuNjl SaTrdKHUAXcEEudvfJgnjW/bzP4iHEcYYCbn0/QVnM/lvOav54JnMO9pwXILPMNFbPtR UeF+a2RcNnQI8BMx6ZAoT6nFbIsNFECLD6qk9Sm+sqWueet0PN4ZG2RVOket/ISsXInW sIHykz5B5zqz9fOn2YKR+1PLMQhZCEA9WcIFB2ErUFWR4W/mmVLBxl+BzWgYkDcdmiun fkOQ== X-Received: by 10.68.225.10 with SMTP id rg10mr4121261pbc.80.1392231267430; Wed, 12 Feb 2014 10:54:27 -0800 (PST) Received: from box.local ([50.125.66.158]) by mx.google.com with ESMTPSA id sx8sm167277471pab.5.2014.02.12.10.54.26 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 12 Feb 2014 10:54:26 -0800 (PST) Message-ID: <52FBC492.8040700@gmail.com> Date: Wed, 12 Feb 2014 10:59:30 -0800 From: Blibbet User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:16.0) Gecko/20121005 Thunderbird/16.0 MIME-Version: 1.0 To: "Waltermire, David A." References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> <52F2B782.2080104@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "mile@ietf.org" Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Feb 2014 18:54:32 -0000 Yes, you can simply ignore SWID. Continue with CPE. Just like you should have rejected the Microsoft inclusion of PowerShell into NIST SCAP's OVAL. :-) I believe you are incorrect. Perhaps you have been mislead by the SWID lobbyists? Have you joined yourself? Answer: probably not. Re: cost, Wikipedia page on SWID: ----snip---- "The organization will act as a registration and certification authority for ISO/IEC 19770-2 software identifiation tags (SWID Tags) and will provide tools and services allowing all SAM eco-system members to take advantage of SWID tags faster, with a lower cost ($500 per year for individuals, $1,500 and up for organizations[6]) and with more industry compatibility than would otherwise be possible." [6] http://tagvault.org/documents/2013/06/membership-information.zip ----snip---- Have you read the 40 pages of legal fine print required to join? How is this a good thing for IETF SACM and NIST SCAP-related standards? Besides the freely-available XSD schema on their web site, are you able to access ANY SWID tags? Answer: No. From earlier in thread, the comments from Symantec -- one of SWID's founding corporations -- are fine for large commercial corporations. There are still massive SWID barriers for open source or Free Software. These barriers will ensure that only large corporations produce security software, which is bad now that the gov is finally realizing the value of open source. I think one of their main main arguments for SWID -vs- CPE is that CPE's Microsoft namespace has errors? That's not a fault in CPE design, it's a fault for Micorosft, a SWID member, that has been relying on third parties to maintain their CPE namespace. Again, NIST SCAP should not use SWID. IETF SACM should not use SWID. NIST SCAP may be going down this wrong path, but I hope IETF doesn't follow them. Why give control over such critical metadata to a corporate trade group interested in making money and making barriers to access? Corporate-run industry trade groups that use standards bodies like ISO for legitimacy are not the kind of people that should be controlling key metadata for all computer security! Thanks, Lee On 2/10/14 11:57 AM, Waltermire, David A. wrote: > Blibbet, > > I don't think we can simply ignore SWIDs. In my personal opinion, SWIDs have many advantages over CPEs including: > > - Providing authoritative, high-fidelity software data generated at build time by the software creator/publisher. CPEs are commonly generated by 3rd parties in a labor intensive way by scraping vendor websites and vulnerability bulletins for software data that is often incomplete and inaccurate. > - Providing more robust software metadata that goes beyond the 11 fields supported by CPE including tags/identification for patches which CPE doesn't support. > - Normalizing the data representation for installed software on endpoints regardless of platform/software specific technologies. > - Providing software footprint details including composite files, versions, and hashes. This is not something that CPE supports. > > Simply put, SWIDs provide greater support for the management of software across the deployment lifecycle than CPE allows for. This has both security and IT operational benefits. SWIDs allow for greater coverage and address the scalability concerns that currently exist with CPE. > > With SWID there is not a requirement to pay or join any trade group to participate. Software publishers are responsible for the creation and propagation of SWID tags they produce. There is not a requirement to centrally curate them like there is with the US Government curated CPE dictionary. > > The ISO specification is behind a paywall, which is the ISO model for publication. The IETF and ISO both reference each other's specifications. This should not be a significant barrier. > > The schema is freely available. You can access it here: > > http://standards.iso.org/iso/19770/-2/2009/schema.xsd > > TagVault is developing best practice guides and certification requirements to help interested software publishers to demonstrate the degree of information provided by a publisher's SWID tags to support various use cases. They have stated publically that they intend to make these documents publically available as they are produced. Participation in TagVault is not a requirement for SWID tag publication; it is simply a value added service for publishers and consumers if they choose to participate. > > I know of no US$500/year cost for use of CPE. Current CPE information is provided for use on a voluntary basis at no cost to the consumer at: > > http://nvd.nist.gov/cpe.cfm > > I hope this helps address your questions/concerns. > > Sincerely, > Dave > >> -----Original Message----- >> From: Blibbet [mailto:blibbet@gmail.com] >> Sent: Wednesday, February 05, 2014 5:13 PM >> To: Waltermire, David A. >> Cc: mile@ietf.org >> Subject: Re: [mile] CPE and SWID >> >> > Please let me know if you have any questions. >> >> Will this long-term mapping between SWID and CPE mean that we can ignore >> SWID and just use CPE? >> >> Will I have to pay and/or join the SWID trade group to access this >> information? MITRE and NIST were goot at SCAP standards, making their data >> and schemas available without the extra licenses and registration barriers >> and fees. Do you have to pay ISO for access to their SWID standards? The last >> time a TagVault evangelist came on this list to push SWID, they failed to make >> any case for noncommercial use of SWID. >> http://www.ietf.org/mail-archive/web/sacm/current/msg00679.html >> >> SWID adds barriers, that'll make it difficult to create open source software, >> especially Free Software, that uses SCAP/SACM. >> >> Does it still cost US$500/year for an individual to use CPE. The only "Open >> Source" Microsoft mentions when they defend SWID is an internal project >> (WIX), where they fund all the fees for it. >> >> This sounds bad. SCAP/SACM should not use CPE. >> > > From tony@yaanatech.com Wed Feb 12 12:52:08 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADC991A0694 for ; Wed, 12 Feb 2014 12:52:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.049 X-Spam-Level: X-Spam-Status: No, score=-1.049 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RP_MATCHES_RCVD=-0.548, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z8y1ONVYUxGV for ; Wed, 12 Feb 2014 12:52:04 -0800 (PST) Received: from extmail1.yaanatech.com (extmail1.yaanatech.com [63.128.177.51]) by ietfa.amsl.com (Postfix) with SMTP id 8DA471A06B7 for ; Wed, 12 Feb 2014 12:52:04 -0800 (PST) Received: from [192.168.1.2] (pool-71-171-106-160.clppva.fios.verizon.net [71.171.106.160]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by extmail1.yaanatech.com (Postfix) with ESMTP id 912C95808B; Wed, 12 Feb 2014 20:54:18 +0000 (UTC) Message-ID: <52FBDEF1.2060004@yaanatech.com> Date: Wed, 12 Feb 2014 15:52:01 -0500 From: Tony Rutkowski Organization: Yaana Technologies User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: "mile@ietf.org" References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> <52F2B782.2080104@gmail.com> <52FBC492.8040700@gmail.com> In-Reply-To: <52FBC492.8040700@gmail.com> Content-Type: multipart/mixed; boundary="------------090105050600010904020004" Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: tony@yaanatech.com List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Feb 2014 20:52:08 -0000 This is a multi-part message in MIME format. --------------090105050600010904020004 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable We seem to live in a world of parallel universes and reinvention of platforms every generation. The idea for globally unique software/application IDs is compelling - as it has been for the past 30 years. Since the CCITT/JTC1 meetings of the early 80s, SWIDs have been pursued by different groups. Perhaps the first and most elegant SWIDs were created in the OSI world. They deserve cudos for being far-sighted - even binding the SWIDs to PKI certificates, although their platform had limited takeup in the marketplace. As the years progressed, and the need for unique software IDs grew, multiple organizations and groups created their own SWID schemes and sought to assert it in the marketplace. Bob Khan's combination of DOIs and Handles is perhaps the zenith of the SWID concepts. The 19770-2 based SWIDs are the latest folks on the SWID block. About two years ago, the largest standards body today in the networking sector, as well as the constituents with the most compelling need - 3GPP - undertook an 18 month process to consider if they should establish their own SWIDs. In the end, they did not pursue that course. What they discovered was that there was a world of autonomous parties that have adopted well known and widely established SWIDs. Especially significant were the maintainers of the two largest application platform OSs - IOS and Android - which have their own widely implemented SWIDs. So in the end, 3GPP chose embrace this diverse, autonomous SWID world. The result was promulgated in Rel. 11 of the world's universal spec for mobile networks. The materials - although extensive - are difficult to find unless one is familiar with 3GPP and has access to the materials. Some summary slides with pointers are attached. Although 19770-2 based SWIDs are not a bad approach, it is incomprehensible that a global standards body - especially the IETF - would embrace them as the only solution to a complex need where there are already so many equally compelling solutions. The work of 3GPP here is worth emulating. --tony --------------090105050600010904020004 Content-Type: application/pdf; name="swid_overview.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="swid_overview.pdf" JVBERi0xLjUNJeLjz9MNCjI5IDAgb2JqDTw8L0xpbmVhcml6ZWQgMS9MIDE2NDQwNi9PIDMx L0UgODM2OTMvTiAzL1QgMTY0MDQ4L0ggWyA1MDEgMjMzXT4+DWVuZG9iag0gICAgICAgICAg ICAgICAgDQo1MCAwIG9iag08PC9EZWNvZGVQYXJtczw8L0NvbHVtbnMgNC9QcmVkaWN0b3Ig MTI+Pi9GaWx0ZXIvRmxhdGVEZWNvZGUvSURbPDQ1MTRCNUU3REQ4QUIzMTcyNkY4NUUxMzIy MTZCQjJFPjwyOTBFNUY2QzQ1RjUxQTQ1ODcxNDE1NTVBMTlEMEU2Mj5dL0luZGV4WzI5IDM4 XS9JbmZvIDI4IDAgUi9MZW5ndGggOTgvUHJldiAxNjQwNDkvUm9vdCAzMCAwIFIvU2l6ZSA2 Ny9UeXBlL1hSZWYvV1sxIDIgMV0+PnN0cmVhbQ0KaN5iYmQQYGBiYDoHJBgDgQTDViDB6gTi agIJZkMQcQFEJIEIkDqmHCDBIgpibQGJTQISXC0gHZFAwsQbSKQZgIwCcY2YQOpARrEDjWdk WAOSYGCknPjPePUTQIABAGO4DUQNCmVuZHN0cmVhbQ1lbmRvYmoNc3RhcnR4cmVmDQowDQol JUVPRg0KICAgICAgIA0KNjYgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0kgMTU2L0wg MTQwL0xlbmd0aCAxNDYvUyA3NT4+c3RyZWFtDQpo3mJgYGBlYGByY2BhYOiSYBBgQAABBmag HAsDx0OGncsYGIST7jeAhJVm3bjOEhwt9YCho4NBoqMBSEGkgXI8DMxbSoG0MBCLgA2JZOBn 2MG/hK1Bt8HvwSFHqyZh1grOHMETizYw8PzZ9LqBITmI2Sm7Q7QBYicvA/M2NSDNCMRdEDcc 3QjhM4oBBBgAooYhqA0KZW5kc3RyZWFtDWVuZG9iag0zMCAwIG9iag08PC9NZXRhZGF0YSAx NCAwIFIvUGFnZUxhYmVscyAyNSAwIFIvUGFnZXMgMjcgMCBSL1R5cGUvQ2F0YWxvZz4+DWVu ZG9iag0zMSAwIG9iag08PC9Db250ZW50c1szNCAwIFIgMzUgMCBSIDM2IDAgUiAzNyAwIFIg MzggMCBSIDM5IDAgUiA0MCAwIFIgNDEgMCBSXS9Dcm9wQm94WzAgMCA2MTIgNzkyXS9NZWRp YUJveFswIDAgNjEyIDc5Ml0vUGFyZW50IDI3IDAgUi9SZXNvdXJjZXMgNTEgMCBSL1JvdGF0 ZSA5MC9UeXBlL1BhZ2U+Pg1lbmRvYmoNMzIgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2Rl L0ZpcnN0IDExMC9MZW5ndGggOTkzL04gMTUvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN7EVltv 2koQ/ivzmOiI7v1iqUIiUFKkkqKanhwJ8eCASywZjGxHCv/+zPhCSOA0pKlOZdm7Ozu7c9lv 57MRwMFIEMqDUSCMBaNBCmwMaBMACixOGAfOotBDEGATgNCBB8tBOK7AChBeC7ASJA8CsAqk 4hwsbqUltgakxcHHj6yfpVkebqNFTIPCknEO37pd9umxvA7LqKSJ61CQO/XEMNuUKJtOBXmD MuxKcqXuanKj7hqyXHfJ7Wb9JM8WYVzO2GQwZNP4sZx3uzM26vevoiJegq4cmKOFrxP4EaVF jJ0xCBb2mmE4Bv6BSzbdbeMnN1m2ree7XVzbKxbxpgRnOOuPBmgOdO1KP9p+jpPVfYnZMWwQ 13odiYrDNFoVoKsAr66yx1nHYDI7ijsQUnMIrJ5Xk8NonaS7i36UJnd5clnLkjSWoHVlhAQ3 0Tpm45vhl6+TvxrNSh6WeVwu7tlNlq+jtBLd1g5pztmoRNVFb7NKY+AsLOP13+B5HSqpksN5 si2znP3TxKGtr0Km9JHKS6MU/67AnUabHxmlNV/GebJZXYyWGHpS7i7Zt3iVFGW+u+gts7v4 koUP220arykzHE8Md5hm16PBONqydhEb3ILg6PFzrwiulIHw4a4kn3EpKZD/8ikKdjtTMynt 3Hs5U9zO5z+NoD6lZYRZxtliZioozdmnzSJbYiR7pzqf94bJFuYt+75JUCkG1SCxdeEIJa/h Qsl3AcMcA2PS+wPAODC6T99tsultimQ/HiZ5UfbvoxyUOTpfVwXyJWo0hLZPOc8f4mmb/Oag k2V5X8yoOvHmUZg7eqmP6a2+EpTH2oMJPeeV1ldvvWu7t3FYHvECGkUVEMul91XJtEq0NkRQ aXoEkNVYkrBAGkEBGawOpKu9wxmUWgc+QHmzgo66/TZWyZpEK1LVLUoVx9aJaixlgEUXdzR1 3wW1vpGuaQ0oHYAKBGKzHmv00ZHnirzBLAWEGm05nP9gRueH2A64OcC2E/4A20KcwrbFSt1R FAJeb7rj9hm4e3kSpZdPSK7G4+mvQtj/FMJGmOcQbq2dgV2kxCPwBi/Ai7f7dfAqBKkxdv5f xGLPIxbrD5LsML8d6SwWEGJtLl6vIO6ogoyv+u1l7tTJfeMpdIRpzsH5D975N5eTEx78v3Rj xe+hmxOBvGQdK9/OOtq/k3UC+z7QBCdAM/jjoDny4IzrrI/PXr+4zVKcc5sP6Of8h8iF/szl nlr4AbHwPa3Qz7WuV1SUIveUwitCObGz0NWr6SefWlcTSStviYQ3NCKaGbXXUGhJ+aCmEdoB K9KeRrRDsP8rwACUQ5HzDQplbmRzdHJlYW0NZW5kb2JqDTMzIDAgb2JqDTw8L0ZpbHRlci9G bGF0ZURlY29kZS9MZW5ndGggMjI3Pj5zdHJlYW0NCmjeVFCxbsQgDN35Co89dYBwlbpESNV1 ydBr1aTdOXBSpAaQQ4b8fYFGqTpg9J797GfzS/fceZeAv1EwPSYYnbeES1jJINxwch4aCdaZ tKMazawj8CzutyXh3PkxQNsy/p6TS6IN7oahuRcn4K9kkZyfMvMgPz4z068xfuOMPoEApcDi yPjlRcernhF4Ff6RwxYRZMXNPjtYXKI2SNpPCK0Q4qzyd36UCtDb/3kmf1W30XxpYke1eBKK 7aJWiiajrN2rSpey4eHKrETZcD1DtVUMOY/HpWKIZXZ57EeAAQAU2G0mDQplbmRzdHJlYW0N ZW5kb2JqDTM0IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggNzQ3Pj5zdHJl YW0NCkiJnFVNb5tAEL3zK/a4W4UNs1+AVFVqG6lKb1WRcoh6oJjYtBhcWDd1f0al/t/OAknw OhJOZdkY2H3zZt7M2x8BkIoEOjZEGhJqFZFYRKQrAzk82QY3r0gT4NNU8EgSA4KE+N+tuMEX l+97Q4qewPDpC3zy4TOQdT/tnwHeBZ8eX77LgsssE7glu0NwJXmakHC8RAQg5rgXYs2VItkW V6wDHkWRJlmBN9l9cEs/t3f2ngFwRXPGY9oxkFzTkn3JPjpwGMElN0pLBM2u3M4ieI048k32 bUaAC4EZDUtcFOWW0esrNi6agHhi4ngJR0bmCUe6Zbf0umEQUYv8DAfarvaFrdrmgaZ6qAFo EuIX/8SGK6w3F2PqjsxfdhQIeDKGCV2cZIzzdrerq4K5IDn+CmpZiAvpLNiUiuI6SRZLMg9h xhDVqmxYgpi2soeTQgOYxfqIJ1AY1KRV79XZiHNRMM/jrWri/HxCs3xgzKfoKjuULKF57eUj uFkukjSnRWp3ZcdENIigRhGME+EkguImXsxVqFkEMVQsb1bHeQPXYllPP33al8W+c0IegUm+ XP9Z1jBkTZuy9EihXaj/aYfG0zTWZ/eDg4lHEWzLwhhdYcVCjeXPGQh6YKFMUJI/TOME0P5E 8HSZMcwZD4Q31XpTH/zc1bIgc9YmnRpyoG3oloUJzvHOsde0dheF1gYRpvTrZPBU9LJGnQyj KdFADW2770zjBPj1kDyOFwY6lCkH7OGQp+a4SVGBTT4MlvVgcRrMIl2YdxhMjVHU+1XpFzpV i2BKnbT+6tDk26q48Ft/mZl4xnnzvR0Mt3WzrmnTbtu9X03NYbmRZ90FydTJ6xxRAXW3Y0eX eIteS+/dberOPuk629n+MwrKRUuG2Yk1nnz5tm3Wfp3PluzRCWm/zTvr40h9NqO5qe42bVP2 l9aNgDvwB1P9Wpe2v/CSdofnSzx10vBn1dl9Xle/mRAoJbqZb9aPvMg/AQYAMtcOMA0KZW5k c3RyZWFtDWVuZG9iag0zNSAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDY1 MD4+c3RyZWFtDQpIibRVuY7bMBDt/RUqSSCa8NBFIEiVKkCQRp2RQpHlXSVaydAV5EPyvxmK lK1jd+kFksawIOpx5h0zzEvzwwfGmPyY/ji8T1PhcS89H0AEHvPSTwcf9Et96ki6oqV+DDEZ qQ8RKfOie0e/pZ/1d9x8JyFI7JfsLmihT5GsPlFzyOJwCEXyOo4fMBDC80FF60JJXjXDBk/g UQceCCluhfHA9HzKaIi99lThb7bplkOMlztQebRoVxnUvKhpAiHCcgacIK88RF67GT+wLUYg YmyRg7jeQf7Q1QUckgX+VDX5UlZV2dTdmgN5q+UVbaw4GiyewJrzGgaSmaeXUZYSc9NydrlU ZY5kKqRRE+oLMtW4pjSAxKmTSPY6PWaUS5RopBFIUuyEUm75l+qHBhV1UahPhsWiWpfyVP3e IAuII6fhV8ayfBRPWnX0OXmYHFZQ/Hva5ylxSiajq2Qz160hY0+D5G/STlnAvKG+goTUJv8d FaRHUibz1r39U+mXEdkyFAB3j4RlSK7RKztMXTxZBQLSlt8HE8PitLsikG9x9kxTjjzpkhuK num2VkTJA6dpVuk2w6x/LLbDTIbO8pamZokpsC76X5iVpv25s4VUDiF9GT8/Ho+krKl29bml gmHjWaenUEL6dsj7ASkRzyQoBHcLC+OY0ZH129HB7iZU12tT+JR1XTniwBS7suQtXHc5WrDI JlvbV06T3Z88hY8Kje0LHcltDHF9uAX8N2ttAzQvDG0DLBErnTcHPiiUcmiGbjeVQuDuxbR0 nI1cMeIlAWauMhNv1E+SlOapftjuJyQrDu7cT1dajuTrSGMsHgfgbkyHbjX/R+BsYReTBYX0 7ja9vdf7K8AAoEwLNA0KZW5kc3RyZWFtDWVuZG9iag0zNiAwIG9iag08PC9GaWx0ZXIvRmxh dGVEZWNvZGUvTGVuZ3RoIDc5Nj4+c3RyZWFtDQpIiYxWTWvbQBC9+1fouAvVeGdX+1VKIE1L oVB6qKCHpgfhKLaKLBtLickf6e/trCTbsuxGOZgV9ujNm5k3by2idDH7IIRQN+mf2TxNZYRR +jgTEeoopo+IpNZgIvQIJonS9Qwo2ofXfrE65wY0e+YODMu5pOcdl0hHxmNAVvLf6deAih2q BGcIMf1E+NfzgpSui4hBoDRdnpecx4gBFBVl2vGE1e2zZu8uUijnJnMkxxxCuBDG1k9lU2zL nHehPZoCZZIptMQN0HTHONtudxwN9WCTLVZ5PWKZgBWTuPIEi0kHu8p424Fn6ruijp+jIng5 XfuAbD/GfJ0TWQTLllyDI1x6fBiBU1qUU+BqgG7bvjab846C09MS6AIG7VxnVbYMFOVF0Qrk ZCfRDIqWHa/VaNQI6g3MhqPuxdnsnmqOgrTYhCMhhnjRPQleTXbvDN0fhVQWC25I/EFNDcke PCs21YWikindx8qDoaAYvBkXUTzkFW2xY03RvFx0GHGyM8PJY4e5WGVlmVdBU5bl40VNCHWy I8l4biRWCF5ATJdwQEyOnqWAwuLuIOdyBmi9ETXI4FxtHva3n7s5zN1Kh0fFYUueffnx7baP 04cJakmaPvFRR9ZCWXlzBgrW6JOI++W93RacqmbLnOxMyuCWPznSF6tNmddZeVR2n9EGa/nf TM1J2/1sQoJWK60Ws6bYtCZR1SPYBLxWvnvnKqLUQx3ajvzdZr0mPM+eeBBg1Rp/EdRo2Ekx 8pDCKO0HzMmmz13gVNmVuc/vahMtavqdRhrViyqQwoEr9KJdcU9UaOsUa7bv5/P9fs9NEBtw FejtOVIjFqRrG/aohipv5i3Vz+lMOgtUaEJaMhG4JAwUlYUk2uWzx9nH9DVlKUFvnSlrOVKX vKqugxS+b4Pj0oBprT1ZRlhrVtCqjHdE6IPmXlk9cVoTtK6/ml94bGk2dE96ShMSCBauUUst W1/ey5LKf2ueYyGs3uaL4pE0N7o1hbTTjuHNGO6e/lFc2LLxb7h39EgcrC7J0sZQzk5b/Bmt zgz0PQ9I0T8BBgAhFQoKDQplbmRzdHJlYW0NZW5kb2JqDTM3IDAgb2JqDTw8L0ZpbHRlci9G bGF0ZURlY29kZS9MZW5ndGggNjQ4Pj5zdHJlYW0NCkiJrFVNbxoxEL3zK/ZoS8F4xuMvteol aSpyqQRGqQQ9oBQqqhRUSFpV6u/o76131wvs8rGhyskCjd++eX5vphcCZZCFeacLRijjbNYF Ad5hFm46MgsPHfaXh2+dXgimLARh0UEm8wIhpdRF0Wi5+Dlbb6aPj79TuS7LSZDRVJYXeG/j HfWuBikQAXeImJeN2fNywZXw7Mczt4LYjH8Od3vAKKzW7hJgSMCLL7MlByWAPS3mi9m6AayE Id8OXH07Z+wKDSZsNOrfTHgSALc8jUwCCFREJYmrAUcVP8VuORIKxa4rGlDdk6BO0cCjwkFB gwDxTeKwxUJPvg1LebPTqqDJ+mFURwKhHOoakrLYQFKSkkFYqF8X5Fy6fZyC3nVjCgafhDH2 v7qpRGd/mhyMdOc4bF+rkmHM+sOPvf57DvrgmZSQqFpfad8s5St5p6jZlkRrXi6tS9erAKsI IMnsB/hcdru78A5X86df0/WsntxoTk3tyd1rDSCpVQasiNcDB4gun8Yo2/jHqsjyshE5LZSm l0cuUnfgym+FKe9aL5B9jSfFL20a2CAcALRhgzEHc2LChpE8uy8ynUC3oW6AsquGyTA6/VVN Zm2by/Z7SC4Db61s2kwrusBm2GhMS+PPNEaUBlKu313gYI/MtugINPYMSs1VZSe94XVzFDnn T/nz+IDUpdC2d89Bsg8HE5ek1q1zRTdFRtjO/CqL6IUnumyZdreI43ydzjmQcGy1/n6wnxSi uSQsYE0JO5jxLvj4IJt4aqHZqjg9e85Pti5+OfYQz8jsYOXmm1HjRStX1SZCjOmplRt1uGjl mmrlDvqHGzeOwdcKp0xzZnDLXZQkOjn7J8AAKsT/kw0KZW5kc3RyZWFtDWVuZG9iag0zOCAw IG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDU1MD4+c3RyZWFtDQpIidRVy27b MBC8+yt0JIGI4S7fSNFL3QLqoQZcGghQ9+CmcuAgbYDYx35Hv7eUKNl6Wk4fh16kg0bD0ezs yL+fXXsPCSR+OwOmRMITP5+Fy93sFedcvPYPBQIjgiFoHSEsPIUCRoSz+oZGXMWEDJ10U1zC Nbh0ybV53D+1qYBp1GaSSkVEyrgxWMA+Eb+hqTFMkXv62be/UygnL6UsxJlS3GqZXfXE2dqQ cSYEPFHZKG75jlpmyJuetOkRtOjiCCQo6E6AoxmzTUZMipY5FxSlwMBZLLDkZ8Wja0EGLZzO E+V5iy8P+d2hQqr6RC35mBd6ULyLXmRf8+8UkFly2G13+fO+NqVilowrN5amYeZoy5ossvl+ TWnLQWQKedMa0pkqQ2ltfD48AGWPJ4EsGTK/6iZDWFQtzcJgh0lwWVlLfEdCUKDOSGiGM27O LdPa/tYW8moVyI+uBs3P2XB88WhDGOXHxXX2loLqJZsnIEImQ9bKG0+EDnO1SbApWJX4by8r HWeFnEz8OccLKhWp1vSmOzxu7OQeStkIXIzBPs/7MTDwkqr5wx6sKzU9WbVafuhSWXTq4poJ VCghznf7RFNEBuS5V1ygLq/pIjFVk4QFveoOEoya9Ky5hH+hVIf+a1wPlepYxdWlKgyTLgTx 8lIFFeXPd/e7Aw374ciGymDyY6cIQ8WqyR5sfcl/VtfzRfaP6zqufKip3p4aM1GVyS8BBgAO 6fqEDQplbmRzdHJlYW0NZW5kb2JqDTM5IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9M ZW5ndGggNzE5Pj5zdHJlYW0NCkiJtFVdT9swFH3Pr/CjPRHXvv6IPU2TBkPT9oRotBeYUNak kIm2rCmwP7L93l0nKWkTUEBs6oNV5/rc43uO7+UAxhFB0o8RF0JIks4iClaBZumPaJKmmuDe PIql5UobS2LJpXcQDog6+E8baJtAyRNw8gFRqhB0Ro9/bZjnkhYs5pou8yJn39Iv4Zxpzime GAnNuRr4HdJR7/eweUc2DmyTBvsuuy7zjFlu6IbFgFnKFTPc0mUvh+ZCOv2yHLLJMUNAF9hL XNabcl42O9mGJTyhRbVNBdtUWsNuKnrQ1klu82jX5tll0R6fHFWWzCr8LnCjmi0xXlrbCWUa WldYVIe3lsA93dwgJaDV28nk/v6e2VACPmMOl+x7HThnoPHfigHWan274Kt1OJrQSxYrg+uk lucwq4rrcllcnDLpatFw8+dt2QbXfxfFss0dY+rq4qvkN/m8roIglxHmEcb7kQL4JwvAQXnb l4Eep9PP+yiSW7ety0DSDkvozpFQQ6WnfSChQI0BPfJYpJB9JANozTFKpg9krH4u0HH6iEMk KUmkfMItECVQdU1ijnZXUnGwZF3gR8sTt/24iOZvosN0hxUiKS4A33i9CKIFmhsfhsKFpIta 2UBY14RRcvztc0ZjeW1eooeoOwQ9pyDkAEwp6fbAVAI9MMTq2k3LTPhzdjAoprVujNjDmwxG abCmQ6MIPeq4R4yCUf/GKMK/2nH/S0B4tYDtFfU52x9A6E2DxgzMNGCbcyTxHBpThhO/2R4q tuk+QfXp5KRPTyZPjZxOyZ1pkLRtd/qBxQ7bHmy7fifEU+Olw9vpak0rypb5UM9Rq8LD/TA2 wBylA6PCOBvd0WkMj0MlY9gALL3Dkaqw2/fv6J9NLqCqtmZ5ccc0jqcVi8MS5qZpBqqneS+H Qt+8SJi2kpurol8DZcbf6gDojN5kFZMiDNWOGvkrwAB1BvtFDQplbmRzdHJlYW0NZW5kb2Jq DTQwIDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggNjIyPj5zdHJlYW0NCkiJ lFZNj9owFLzzKzjah7h+dpwPqdrTnnqsckM9pIlZUoUEQbRq/32f40ASm8VwIQKZYTwzbx6w LfYbYKnY8m3xvsGXavOdcy7fij+bb0UhtmBOMAGJPcE4B2FOERFTewbsGWD8euhrGJHZExHi 8BFnR459R3MmyEAjwMfhQn8VPxbAkvE8DDzjpiO9oV/TY5kKglz5j+wSy05TSMlfKjhTpDw2 XdN9OPxiBnEWgpaJe3EyHLSroAxzXCmYW47l6dQ2FU1ISRMGVsicNKiryzTOgkxXPzCJ0NS6 oxnLyNAM/zx7IOy7XPjDMwtaHcq21SinQrLaQ82S+DFqJHOWYxgjhvFYS1t2tSutEuGbxzNJ mEjW+nPiF2E22/6ka09UEXbtaj86tE7lNTmPQn2buR3Zt5hHYwQmkknS/G5d4QTLZXCa48VN ubTQp7MJuSTlx9HEKEWvK++q/NlBNMBwS+eZgkHsy+rg+7yYOrDfGYG5TIUDnqo5RjChn9GZ nMWkwtALDP/0tjNDgIaZd4r4mRVZIF1zZhcalXV/wjigNhRwWk05YDbcREgmnyis2QJxc7en kTCIZwcR2EvVCsri/UQxQKIa7fhUhHm4igd1uALP1Q/wZfWbRInHJnpNuMMqNJHDevH4JUlw bMEfE0wwZll4vuOmg+BwLKsqtngXfaZRigQ/aTra7s4cvBQnsCV1cTdUeA17GJ3nRMhQU5sS 07eszXy6p97vKSi8p7bXNUNlFt8wPmPSmI9zVAEXTHqns59YL/eq54K7i+H2aku/z+T8lSd3 1giK/ypq3a7FEUylr2yqu3O5/S/AAAhBBnENCmVuZHN0cmVhbQ1lbmRvYmoNNDEgMCBvYmoN PDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA1ODg+PnN0cmVhbQ0KSIm0VU2PmzAQvfMr ONoHXI9tjJGqntpLpd64RT2QhGzYJhARdqv+kP7fjjFsiFnJQW0P+ZKH55n33rwUX6MPRQEx xMUhAgY65nHxOcK3XfSRcy4/Fc+2QrgKJoRxFaSk7mR8lqnx4P2n3FnC7KHF3pBtR0EzSdpy T78X8zYEk8YE+1CuwiIKh1h2HRWcGWwNcibIrwUu10HciQGLm9kq0h68SY0Uj7KU3GDO7bY+ VfdQghmuQlhSz7DycdTL5VTvqMZRNQPS0wRYTuq28UZWKEuYynmz2l1Q76uGGuSyr3ufR8kg 7BM5kxzSgYGmqvbXkQDl6hLJWa5j7F68wZHf9A4LmLlJYoaKb+Vz2/lUqjQsi/Jl2ZBXmpGK InvNHjEhxW/XxcAiqNId9GBIUjb7+x6BpeJhY9+I25DL0BiQ9hV1Gb8vm3zES3NVlAPf0ZSl pKWJQFQU3boJ2SRdvX3pac40qfwNVSzTq+5yK9C3/ialAR/xGClI8MVjleH+mlhm2nrlPCe6 P1Y+0TKEfE+0No6Ln0hDhmx0NMFryI9lgoSNMNsmmLbJ8qhIdZ7wJvsLyTQG52P+HyYeRCPF cuKUr8rMMYWP9ZUCYG89zWwYd8vQzPJ1cfdX5n/DATFy11UYbtbuCUhU5sX+QmlOw6eLPiRx sQ7Y9+Pr8A/DPh8dWV/98dW6IB6381o/NfXBZj0OXzY0x4n9ZYRwPM2X8T+Y3Xp9+hOmgx6V h4YrCavy+d3s84MIb1oZeiPq0cao9Y/r80sRxX8EGAAZ0/+RDQplbmRzdHJlYW0NZW5kb2Jq DTQyIDAgb2JqDTw8L0FsdGVybmF0ZS9EZXZpY2VSR0IvRmlsdGVyL0ZsYXRlRGVjb2RlL0xl bmd0aCAyNTk3L04gMz4+c3RyZWFtDQpo3pyWd1RU1xaHz713eqHNMNIZepMuMID0LiAdBFEY ZgYYygDDDE1siKhARBERAUWQoIABo6FIrIhiISioYA9IEFBiMIqoqGRG1kp8eXnv5eX3x73f 2mfvc/fZe5+1LgAkTx8uLwWWAiCZJ+AHejjTV4VH0LH9AAZ4gAGmADBZ6am+Qe7BQCQvNxd6 usgJ/IveDAFI/L5l6OlPp4P/T9KsVL4AAMhfxOZsTjpLxPkiTsoUpIrtMyKmxiSKGUaJmS9K UMRyYo5b5KWffRbZUczsZB5bxOKcU9nJbDH3iHh7hpAjYsRHxAUZXE6miG+LWDNJmMwV8Vtx bDKHmQ4AiiS2CziseBGbiJjEDw50EfFyAHCkuC845gsWcLIE4kO5pKRm87lx8QK6LkuPbmpt zaB7cjKTOAKBoT+Tlcjks+kuKcmpTF42AItn/iwZcW3poiJbmlpbWhqaGZl+Uaj/uvg3Je7t Ir0K+NwziNb3h+2v/FLqAGDMimqz6w9bzH4AOrYCIHf/D5vmIQAkRX1rv/HFeWjieYkXCFJt jI0zMzONuByWkbigv+t/OvwNffE9I/F2v5eH7sqJZQqTBHRx3VgpSSlCPj09lcni0A3/PMT/ OPCv81gayInl8Dk8UUSoaMq4vDhRu3lsroCbwqNzef+pif8w7E9anGuRKPWfADXKCEjdoALk 5z6AohABEnlQ3PXf++aDDwXimxemOrE4958F/fuucIn4kc6N+xznEhhMZwn5GYtr4msJ0IAA JAEVyAMVoAF0gSEwA1bAFjgCN7AC+IFgEA7WAhaIB8mADzJBLtgMCkAR2AX2gkpQA+pBI2gB J0AHOA0ugMvgOrgJ7oAHYASMg+dgBrwB8xAEYSEyRIHkIVVICzKAzCAGZA+5QT5QIBQORUNx EA8SQrnQFqgIKoUqoVqoEfoWOgVdgK5CA9A9aBSagn6F3sMITIKpsDKsDRvDDNgJ9oaD4TVw HJwG58D58E64Aq6Dj8Ht8AX4OnwHHoGfw7MIQIgIDVFDDBEG4oL4IRFILMJHNiCFSDlSh7Qg XUgvcgsZQaaRdygMioKiowxRtihPVAiKhUpDbUAVoypRR1HtqB7ULdQoagb1CU1GK6EN0DZo L/QqdBw6E12ALkc3oNvQl9B30OPoNxgMhobRwVhhPDHhmATMOkwx5gCmFXMeM4AZw8xisVh5 rAHWDuuHZWIF2ALsfuwx7DnsIHYc+xZHxKnizHDuuAgcD5eHK8c14c7iBnETuHm8FF4Lb4P3 w7Px2fgSfD2+C38DP46fJ0gTdAh2hGBCAmEzoYLQQrhEeEh4RSQS1YnWxAAil7iJWEE8TrxC HCW+I8mQ9EkupEiSkLSTdIR0nnSP9IpMJmuTHckRZAF5J7mRfJH8mPxWgiJhJOElwZbYKFEl 0S4xKPFCEi+pJekkuVYyR7Jc8qTkDclpKbyUtpSLFFNqg1SV1CmpYalZaYq0qbSfdLJ0sXST 9FXpSRmsjLaMmwxbJl/msMxFmTEKQtGguFBYlC2UesolyjgVQ9WhelETqEXUb6j91BlZGdll sqGyWbJVsmdkR2gITZvmRUuildBO0IZo75coL3FawlmyY0nLksElc3KKco5yHLlCuVa5O3Lv 5enybvKJ8rvlO+QfKaAU9BUCFDIVDipcUphWpCraKrIUCxVPKN5XgpX0lQKV1ikdVupTmlVW UfZQTlXer3xReVqFpuKokqBSpnJWZUqVomqvylUtUz2n+owuS3eiJ9Er6D30GTUlNU81oVqt Wr/avLqOeoh6nnqr+iMNggZDI1ajTKNbY0ZTVdNXM1ezWfO+Fl6LoRWvtU+rV2tOW0c7THub dof2pI6cjpdOjk6zzkNdsq6Dbppune5tPYweQy9R74DeTX1Y30I/Xr9K/4YBbGBpwDU4YDCw FL3Ueilvad3SYUOSoZNhhmGz4agRzcjHKM+ow+iFsaZxhPFu417jTyYWJkkm9SYPTGVMV5jm mXaZ/mqmb8YyqzK7bU42dzffaN5p/nKZwTLOsoPL7lpQLHwttll0W3y0tLLkW7ZYTllpWkVb VVsNM6gMf0Yx44o12trZeqP1aet3NpY2ApsTNr/YGtom2jbZTi7XWc5ZXr98zE7djmlXazdi T7ePtj9kP+Kg5sB0qHN44qjhyHZscJxw0nNKcDrm9MLZxJnv3OY852Ljst7lvCvi6uFa6Nrv JuMW4lbp9thd3T3Ovdl9xsPCY53HeU+0p7fnbs9hL2Uvllej18wKqxXrV/R4k7yDvCu9n/jo +/B9unxh3xW+e3wfrtRayVvZ4Qf8vPz2+D3y1/FP8/8+ABPgH1AV8DTQNDA3sDeIEhQV1BT0 Jtg5uCT4QYhuiDCkO1QyNDK0MXQuzDWsNGxklfGq9auuhyuEc8M7I7ARoRENEbOr3VbvXT0e aRFZEDm0RmdN1pqraxXWJq09EyUZxYw6GY2ODotuiv7A9GPWMWdjvGKqY2ZYLqx9rOdsR3YZ e4pjxynlTMTaxZbGTsbZxe2Jm4p3iC+Pn+a6cCu5LxM8E2oS5hL9Eo8kLiSFJbUm45Kjk0/x ZHiJvJ4UlZSslIFUg9SC1JE0m7S9aTN8b35DOpS+Jr1TQBX9TPUJdYVbhaMZ9hlVGW8zQzNP Zkln8bL6svWzd2RP5LjnfL0OtY61rjtXLXdz7uh6p/W1G6ANMRu6N2pszN84vslj09HNhM2J m3/IM8krzXu9JWxLV75y/qb8sa0eW5sLJAr4BcPbbLfVbEdt527v32G+Y/+OT4XswmtFJkXl RR+KWcXXvjL9quKrhZ2xO/tLLEsO7sLs4u0a2u2w+2ipdGlO6dge3z3tZfSywrLXe6P2Xi1f Vl6zj7BPuG+kwqeic7/m/l37P1TGV96pcq5qrVaq3lE9d4B9YPCg48GWGuWaopr3h7iH7tZ6 1LbXadeVH8Yczjj8tD60vvdrxteNDQoNRQ0fj/COjBwNPNrTaNXY2KTUVNIMNwubp45FHrv5 jes3nS2GLbWttNai4+C48Pizb6O/HTrhfaL7JONky3da31W3UdoK26H27PaZjviOkc7wzoFT K051d9l2tX1v9P2R02qnq87Inik5Szibf3bhXM652fOp56cvxF0Y647qfnBx1cXbPQE9/Ze8 L1257H75Yq9T77krdldOX7W5euoa41rHdcvr7X0WfW0/WPzQ1m/Z337D6kbnTeubXQPLB84O OgxeuOV66/Jtr9vX76y8MzAUMnR3OHJ45C777uS9pHsv72fcn3+w6SH6YeEjqUflj5Ue1/2o 92PriOXImVHX0b4nQU8ejLHGnv+U/tOH8fyn5KflE6oTjZNmk6en3KduPlv9bPx56vP56YKf pX+ufqH74rtfHH/pm1k1M/6S/3Lh1+JX8q+OvF72unvWf/bxm+Q383OFb+XfHn3HeNf7Puz9 xHzmB+yHio96H7s+eX96uJC8sPCbAAMA94Tz+w0KZW5kc3RyZWFtDWVuZG9iag00MyAwIG9i ag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDIwPj5zdHJlYW0NCmjeamCgJ1BgGAUD AAACDAAjVAChDQplbmRzdHJlYW0NZW5kb2JqDTQ0IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURl Y29kZS9MZW5ndGggMTMzMDEvTGVuZ3RoMSA0NTU4ND4+c3RyZWFtDQpo3rRbB3xVRfY+t70X Qot0CMILj9AVREQEhBCSUEJJCCUJLYWE0Is0QTECIgRwFYOKihB1FRHwJba4NnRRUVxlXbGs u3YRFRRsu0Ly7v+bcl5eHkX2t/sPfDnfnCl3Zu7cmXNmJmQQUV0qJot6jM7o3vO3fz71PjTP ATn5Sxb5Avfsf4fIaE3ktC6cP33Or7+OrEfk6UNUp9X02dcWrvzKs4RoPuKNdUUFudOOfdzz M6LyD5C/dxEU9fc0KiBqOBbh9kVzFi0b0+OZLxBeRtS/dPa8/FxqNsgmWvAgwvfOyV02P25I h3jkr0R639zcOQU761x9hGhvApG1dP7CgvmzHjODRCNQh/YxZNldjVvJoShnq3M5atBGSesQ rTUpisyGjmmatmXan5LpJtBuF6WK9tLIDJ+PUGbQ9VCQjP3e+8wOPjK2izjraaeBeDp6hLz3 Ic3tFP6TRjPpGvRXMa2lTXQ7vUgfUR6tBttKO+gheoQC9BK9Tu/T//AneK0zh+pZT5OHGhO5 p9zjwYeAStS0RnM7Qo1tX43GjXG/j9B9H7zdjQlWehpRtMxb33wH2p+MaveUOVCE3d4ibN4M 3lDmOOm9L/hY8OGIPkinbJpIk2gy5VAu2j+NimgGemYWzaY5NFeG5iJuOn4XIjQVqfKRSvCa VPNoPrCQFtFiWoJ/88Gv0SERt0CGF9NS/FtG19JyWkHX0fX691KpuQ4xy2V4GbCSbsCbuZFW ScZSaVbTGroJb+1mWkfrzxtaH2IltIE24j3fQn84J99UK3Qr/t1GmzEeSmkL3UF3YVzcQ/dG aO+U+rvpPtqOMSPitkCzXTIR+xy9Sk/SXnqMnpJ9mY9eUz3C/VIo+3A++uA6tHB1WI1V/y0N 9dZKtF20rUS3dBn0q8JyLNH9KFKuRkpVinoPopTrI3riVrRB8ZoWqdAW2f4abXivnE/L/XFv WM/cI0OCRWrPxe+gbfgCy/Bb9Kpg94Mrtl3ycP19obQ7ZPgBepD+iHfxsGQsleYh8IdpJ77t XfQo7ca/Gh7OlNxLe+SbC1A5VdDj9ATe5FP0NFVK/fnizqZ/XOsrQppn6E/0LEbIC7QPM83L +Mea56F7UWv3S50Kv0x/RlikUqFX6TXMUG/QQXqT3qZXEHpL/j6A0CF6h/5G7xv1wf5K3+B3 NR1yvqQGNAhrwJ/Qz/fSFJqSMGTa1CmTJ03MzsocNzZjTHra6FEjR6QOHzZ0SEpy0uDEQQkD B1zdv1/fq/pc2fuK7pde0q1Th/j2/nZtWzS5KKZh/brRdaK8Hgczs0Hdkv0pOb5Ah5yA3cE/ dOglIuzPhSI3TJET8EGVUjtNwJcjk/lqp0xAysKIlAkqZUIopRHj60/9L+nmS/b7An9J8vsq jez0TPBNSf4sX+C45CMltzvIQH0E4uKQw5fcoijJFzByfMmBlCVFJck5SSivvG70YP/gguhL ulF5dF3QumCBTv755UanAYYkZqfkvuVYl+qLxwas+OTcaYG09MzkpNi4uCypo8GyrIBncMAr y/LNEHWmDb7ybvtKNlbGUF5O13rT/NNyJ2UGrFxkKrGSS0puDlzUNdDZnxTovPzLFmhyQaCb Pyk50NWPwlLHhB5gBJz4GL+v5BdC5f3Hj9XW5GqNJz7mFxJUNDHUTYhnTqgbaoj2xcWJumyo TKA8BALF6Zkq7KO82ApK6N41K2DmiJh9HNN0nIgp5phQ9hx/nHhVyTn6/5KiFoHiPN8l3dD7 8n88/iPeF7A65OTlFwmZW1DiT0pS/TY2M5CQBJKQq9uaXN6jO9Ln5qARM0Q3pGcGuvvnB5r4 E1UCKHziHczIyJRZdLZAk8EBGD46V6B7cpKoly+5JCdJVVCU5U/PfIYudz8t7+WLffxy6kVZ oh6BZoPxUjokl2ROKwy0zYmdhvFZ6MuMjQskZKH7svyZBVniLfljAp0/xePi5BNlLrQtIjUn Fi33xkf5Ms1YK0u8LSh8KfjlT+yPiBi8LhkUbzSxvy/TiCVOhqfoFILVKgcBK37wUBFliayD h8bGZcWpn/NUKVbXyYkPRIWVFQNFqE7qOeesmkotKtTZl1yQFFbBWoU6uoK6tLPX0xR9oR+M HFHidQ7lKCseXy50JoqRKvEWW/gClObL9Bf4s/wYQwlpmaJtoq/l+03N8KemZ2fKt61Hydha IRXfR4UCFIdoDpiDMQZTusbya5XhITIcCg6NiB7G0b6SKH9qRoko3K8LJB++IDTa02FY7oY+ jXrh00zB7OZPyfX7YnwpJbmVbnFeSXlCQsn85JyivqIM/7BpJf6MzP6xsq5jMq+PXS4e1YhS jdSxiZd0w9yTWO431qWXJxjrMrIzn4mBlbtubGaFaZiDcxKzytsjLvMZH1GC1JpCK5Qi4BMB UdIYBKJk+thnYEEXy1hbKmQ4v9IgqYtinUH5labSxbDOhM5WugSpEz94SS2K0MWYbpN908Tr uS6rqCQnS3xc1AyvEv+NgOEfQAHTP6DcMD31AtH+gsRAXX+i0A8U+oFK7xF6LwaG0cxA54g5 qSTHj3kKAyqTYg01FC1RpK/Sdcdmxv0l9nhWHIbaJCA7M1CnK+Z+J3440g0RyIF6SKA4P1fU g8Zlirze+GH5WRi2XCCSDAvUQQl1dAlIkSLziOGITPl4N3iBMn8xAoHirEBWV/HQzBlZcjjH BGiovy9euyrT6SAe1D2rpJG/p/w28SlEx98sRB3UjTIylSYWQTwsS3WStx5qnu9HVH6OD71t U34GhrqaS6NjlaYAU6LdoUAiOlZHkmiWFV+3fnSgzqUoEP8Fr3up+CSdeG9Wlqq8DN2sE+DZ MYG6qFGHsK7UGdA7iBom6oL/N6OqIulLopj0ShrjX4aZRVRaluRFdKB+/LBcTP4qf11o/H04 c5SYI+rqMvYrrVe0vB763YofW+k+7L82Luznkm5+sTiIgUmxz2BgU1ZJpCIwsesl3aIitfWl uqQkqv7ZM6j+iqofkkLpS8aqoXxM5VdG7zh96tSOOseU11nz07C93aAmZLxNZJeR/0LhiXXf FLCzabedRLlnxTHEHaM7bZdiBayjtBtI1jJFIx+YCtyo9butPbTbqUcTI2FXoTzASSCfadNu 03aHQ3aCvAq4DEgDRgMroG8DdLQ3I90m8pqb3EfsTsgPWJMlbrTyNJ9Pre0ptNvzPsruchZ4 gRGU/7sYreD5gfLtdngW4OSBZ4IrZAiJ9g3RaAq0CIWPUMNwOO1o14XCLqF23jZ0dSTsjtQD ZbU5Ay9SP41WUv5MMRcKZ5L7uYBtU5l1kOacDXYBlQEz7aXUU8AqRtpi1EVJn0Y3oDOQqPVl VhryraLZZ2AZ9Mtoo72NEoxjVGYcczMhW0IOBToC44AxwALoLwJa2LFUZg4gMge4G63XUTZg fipxs3lE8xOo22Eq83hQ/m0hbAWWSV4I7KLC38WfFFBOofUKngXY5eDHwRWSpRxNwxTcX4Bf Q+Esam1luUElMR430XbgXi3vBBZrfgasaorzDKArI2G9Sb2t1XhnkZhBSRpRUh6mSRFocxad hKe7gt2LtuL7ydYYBUzgsHceZXv+CRgKSJtjbwRmAr0o1zpNky8E5gKK99xN8VGHKd5+FPwe zftHYHQEtN6zJALrI6D1tdLXwTMGh5W9uibOPq7gNKZ4byeKt/bTFZGQbT0TW+1e7h57sPub 8R7dZLznzoVsCJkN+ICFQCYwHfqLgK3WPrrJbkPrjG/dwxr51gPQa4g0QBeztZSpxmlqbVbT Vs808axaGCXl/e42KfvgfdTG6DN0/RU8b8p3x+XkmG/QVgX3N8i5VhylK2DcxrnVHHb2KqCs rcZJpN9LceZ+QMjnqIN9hOLsxRcG9HWcNxXj+8MLA+pZCtyi5VpgJLBe89JwWNuonVNJV0TC Woo5aTu1OwOdKUvDK2UfWmjl0jRrGcbqbkoyv6LZ5igph5qVNMR4idqbd+IdfUOzjXzKNea4 HyA825iC+Ww80h6RSJb5kMf4FbIHJRpfkF/kMW+ittYP1M1ciTVuLbU1r6REcyzms8VAqVi1 q6OIqo6a48/UoX5kTQWkrmo7MD1Ctw2YYbgI3w3cD+yU+gIgx2qP8n6BLgWYLvU7gJVWR4SH ATNDZVxv1UO4IXCR1O0GHjFvQ/67gB1S9w3wuQkbw3wZeBJpXwI+g80hrY+qMcBlxluwQ94D 3lJAW0YKoG1rIJebN0i5xPgXrTEvY3vFXS9sECsD6+sa6qtsiOBrYk1T9kLwPrE2K3shCDfB HSPtgC3Untd79HGGWsPdZjIP1m3rUdgmah3GehmcK6SnMZ6J9dRDdKuTRlOctOBvvCaKtdA8 LdcYf2gtw9yq160y+wkqVOsW2nbMHSvXo8/oIl53rJtpSmgtWabWD2sipcr1IGzudtBTYl53 Mulmsb5IlMDWEkjAd9oT43Ez1r4eSPdHjFHAPIA5YATiBAZhPlpGHrMnlZo93WPAcqChnFee QPsKIe/EWDdppGXh2+E5YTZ1shvREuTPwvufZLUkyx5Ht2pcDzRzetM4px+NQ7sbOY9QqbOZ pgmY6+W7jEY/iXfd23TozhDaY9y7NFdAvs+RtEe+z/kaS/COOpIVZjvmeorwjDco1RH2lYa2 B9OErReyt74gy3MKeF/ZjV6rxo6zf1PvWdipbHuhnQqVmBdK1bt2WiPNL8BCWuT5EWW0Af+O GnpaQCYAeTTZzqU8bxT4Ath3LvL/CNsNA1uOje/pfmknNdHoiPddTA3C7KFuzjKswcU0wV6P uPV0B7BF2zjjhP2CtpYJ4N0acrws0zbJI8BMPVaE3cV2xDaM2W2wubujHdFqvNi3IM8MpDtF czx+2DvJCE+l5s5q6I4CX9Is6wTsl57gLtb3qdTWzgfwBWINN6Qe6789GP0ixtZhzOv7NQ6L NcjNhJ3XXKwT4Ws4yh8AmyDVzsDYy4BNlYE1Ta2BC8W6Zj2F8QbYTamZx6TGzgyaag/BOtZJ r1WXAV3k+rM2ZHOIdaYlRYu1Ts/NLax3qJ0dhB5zN8biVvtyuYYmOu/SVieI8HCKdsZC9zKw AWN7E+r2KvhB6mNnuL+JtRnvu4U1F23TwFj9o4B5jxFt3kMvClhP0k3AFImPMbZz6DhQbk2j 5VgLpmIcdxFjGnhWjG9nLd0B3UahZ4l3tA7oylLruppP0SJgH0u7JWy+lvgetLSak2F+gjXh MaPEqjL2IlwX4UvMa7CGAFYV7EnAO4C2hAO636wqein0zc2hm4Dl5iK0aRFlm2toPLDYTMC8 mgD9cAoA08+VDmXdBywFlgFL7ADNsq+GPVBFM4Grjf20wbqCNjhYkxysTd5/AVg3vP2V9Oyh xwTgfxY7D9JAZzeNRHsJeQfaj9Mw6LuAT4AUtlMm+DPAcIQzIOegL7qC97J+wlq9Hd/vC/Af tyPddthpcTQs6nLMFVWY37/AGL+ILrZLaap5EPPyMcoD0jE+2lnvQ/amlVYFbLbemA96Y2w3 oKHAXmAhMB3wAQXALCAfGCMxGH2ziVpaN2IevAbz4W7qYBWhHk+jD4ZRd4yNVOs5GoP6pAGb gAIgD+gLTJd13o7xsx3jFWnOqF+nC65fj7PVD9/HUOPfsCEClGruoUHmRxRvPoQx8glNxLrc 0/wM+k9gp3xL6ZDp5iGaYDxHOUDmf5PX3EZ9jF/oMnMM9TeHYVwOpyZmCvKkUw+zD7UzJ6Cs kSj7QtOVu6lWY0pypgJYS53mWl4KZACv0yiJ6TTEeRq4H/gLdXSup2TwZKztwp4bGjWKhkI3 yfs63lcV1vUqGgHkAF2BKZpnAfiG8K5U/DhgvBjPzjfUzXboCs/faAbefa55HPZfFUUJe0PY AWLN9BRgLh5LE+1mNBzf3N3AHcDrEg3oMW8Doy/L6FF0t6cPfLdC6mSUwB74u1x3/0sYhyL2 aFoCTYGLdbh1GKQutN9yFL7iUfco8I2WR4UOa2pTYMd59zxKzwHem3j17Ki1FxHyL91ngXKg UgE+ZYiHdJPC1pce1mn3I40PgYNCj/Wlg1hjanwa9yjwbY2EbscZGCYl+wfvhLBRyxQh9Xpj Com1NwN936dmb8R9Htin5QGtO1Ab0LF9WOyeAB4GdgD3A7dAL/Yu6gClYfsLcUC7MFloHzsH 9J6A0zSEu7VcLKSyI92TQl7QuHuJCp32sJsEPLBxbsecKnAd6g+bSfh0wuYQfmu4Tx7ud8OP aG1+TbdYHqzdqXSLuRPYiHASwhPpFuMh4CA55qfQI2zPQdxizJuLseZ8IHk21t4JZjGlYG6w YUdNML+gVnYy5oonUfYGoJLSYGNWC9iFrhsO6yUBrC/1IOuFpCl8CAHDdd1woIw6AuYuWqVx lwB8kjVhOoUbUGdA+ku30Rp8h9XQNwEaS38rBDxT+FnCf5LrMXC38r2IXPhswRF45mmF4ECF 6pcF9HOboPzVkE2B2wWsu40RKr9qt6q38LWEDD6t69FEPEv0g2gDPzMStkFNbMMYIkozd4m0 6Iu3FFSfCb187gEB6yQd4Hj216DfYZWLuqr83knU3ztJyHDQQM8h1xUAtzQSjE+oh8TX1FOA /k1JAqYXa4JAHRohYGxDmm1S11NC6y0NY6rGGGoh8WdqJvEixiiA/k8PB/r+Uet5jJNW6AOB ZmRItIqAQWY4xDNEP6Ddsi/w7TWUvksCtZE+wTb4Yy7FOiulfgTm09lOPHyzNzDm97jvOQ2w VpRg3KbBb+kAWx0+qbcO5sYuiMO86umO/F8iL+8Xwx+1B+p9YeF7ij3fRL2PC19IlIu1vyjq Udod1ZR2e4SvMwRlPg00wXeL+R7+UV85Z59t/zhsXz+0396JruF5HuVHRW1RZYs4r/Ch31X+ M3zwH9R64n6Gds6Fny18sRHI10/6Wpnui2jHXDynu3iWqK/cx8ecgjqPhP/dj9ejyPVFrA8o /0M7yf3amkyx1hGsAaU0zZ6Fvk1Gv8GPx3PvM8vIC18nHz5OK8zjsbI94mxCYWvYeUQt4Jlr NFYBveQ5hD5/4PMGjU5Col29gQV8lgDs0OcJVwA5QKHwNxlnnCVEtI/PCcLOCJZGnBEM+U/O B8Q5QPhZgPBhQ2cAL1LT0L6/6MuX3XvgJ8WK58l3sQDP/RzvIglr2h7YQ09CN5M66v0/23pc 7+X2EHuz7veewWpvUOwdmIOoo/UE5pAR8LcGUJbUw0/DnC73/WAvxco9MzFWC2EHF1GaV/TX PthObZD2MI2HTzhBrs29aDmwLhxY1/OQJlNA7j+PcD+Xe64PUF9e51H2pfApc2S5ai8W5bov KpsB6aVtEHwLzymAHXBc5DHfcK8x36AYuxfmgF50sxybvWB7/wXtFLb0CNRZ2xyR+6XCBjDX 0132d2qP03M75Xg249l5WNeFjyrai7GKvP3NBPdfAnIf1UVffQ47YqH0dRaKtMZP8O86Y/64 E2MM/qb0tWv2XtcKv/dse8sRe+YDed+c268xHWgs7Bq0va1Gdth+8iys3+v1HrRAlvCtGeH1 kFB9ULNvrOP1/nAJEI1+dWv2hyUsOR726n3gve47AnpvdhCwQu/VrrW2kRG+Nyv3Y3lPtjPi 1B4sibQo41WZRsShz4yTlCHH4mHqjLg77Hy07yMgCXlept7ox37m99Tfaolx2o/GYcxHiT0a oIl1kIZK/1KcWf1N6jNgjy20H6RCq4SKrDTYj6toNvzOxmZP2CzH3KDYx/P0pNvs2xAHu8zZ THPxTUXps54MuYe3GmFxplOu7DP4ieoM5lbYt7fTLOsuGud9i8qixuE7zKYy+DC7PW9TmbcI 3yPsRTxniLT5NtEdZ5z9hJ3J8VkZ6jSGbUc8g7hsEecZB9stj3bIPcef3VeUPQqbu5hGGseC h/Cs+ch3scx73H0Q7ZiG55B8Fuorz+Bul3tOE6yNaIO2ZyPPw6SdKeIOUnvMAR2tLPc76yr4 uuJMdhPC1ZgTimEnDEDZG+Q5WUfkqYdnjBPp8D3sxjveLb+HHDrOe6wac8POGAVu1HIL6tIF 6AAMAggYHjpT5L3YZXQ34BMc7e0i9tn4fBBYqc8ICegEtBd7boywM0KFyHbrs7+wc78BwG01 534SVHPmJ9ECaKnf6bVaLuazvfDzPXmmx+d6M8jR53iyLSgjWqbRfS/7fQr8i1cgURf7KaT5 Qe1Ly7GehvljK/Rstw/RCD9Xi7TnV2mEn6nxOdoFnOdcyBkOvt07as7N5J5fP+uemvlPrgWA EwtfXZ05ptpXAP0w9w1Sc6xEOuK2UVvrEGyIy6Vfp+YpzA+Y434Se+DiHM382n3Y/E3oEL8W c14+lUrIuc99WebLUPuRDtZAua/dm8ZhnvOHQc1/t1Ap4Mc3fZOEmNu/dQ+bie6/pSxx92P+ GyTmQMwrHe0lWAPG0a0838l5LB11FnPc34DnMH88S+PlOlJKU6REmx0vTRV7sGhzNmyhbLFn KsrGXN5RzG2yn3QezzysS+9Sjrcl+uQn9O9+inOWo6/r4Z3tRdoZ6OMfqBswH+09bI90D1vv YU5p6H6BtTbPboQyD9JM2AVb7SzYEgORfh6NEz62KfyZ2+AfnaAecu9W9NMi9PtB2DZif3on 5sRO1MTzJtpQFLZW70QZb2N9FRgIG2QmvskCSnVeo1TPNPg1H5PP0wD9MZoSre6wR8Qagvdo /oh8iLPTIFGG051WYw01hI8JO5yEn2meRn3Zz9xJaRfgZypfs4KGCn9T+praz5Q+pjjb263O 6Oyu+pxPn/FJLIVfKnAndRHnfOKMr9b53ijqLaU+6wud730Em368Ouczh1N98wXwFMStpk5W AcbXVPgv4txQnAvq88BQGpSDNGkijacUY/tZ92H7ebzzaPdhz73uV/YTsANfwLc/BmgFbMP6 1hCys/sy3n8/S8yhsBE867AW43swZ2AsFgEfAfu1zZcOWwW2BOzUHBs2mnGCZnlukHpe72da K7Cmn8J4wfjFHNPZ6g/b7zrYLh+E2Sf6GxXfrBgzcg2+HN/kB1RqLaFUtGWWPDedC1QASylR nJ0C3tD56Wb4mLvkOeocyb8CShFegfW+Pdbc8arPrViMx9aQaJ/ob6s3+lycqc5xPzC+lP1O eGfdEDdX4iZ9rloKPAQshK0m3tM3qs9lPvQ/EG9awAaULc5k11JbYz+NtXrR2Fr7+/DVpb++ lQqA2bynaKdSkoCZTj/K81pxjgsu9gMkF7qr8B1dpfYZzrrXsAt9JXzwXPTNFHVWLM+GxXNi 6I5I2BNqA7rBkOdC90ggvZDxkYC+FeQZgD4R8myIrMe50iWepx5n03eAPAP/bT3OU64f8gyc p36pkGfDhdbjXP3cHvIMnKceoyDPhlr1wNjKE5C2tdgXEmdSuzDHK8h9H7HHJcZraE8N6eRZ l94jY9gJ7q8Clkl3yT0vgfZyj4i8jehdATmvivlTfG9iHIs7Ex+6rgK+b0CcHYeDqKpQoPbe mipb4lz6nyPA+o5qb0vu/X2ow2H5I/dDI8uBDfGUgPTl1b3HwSzhczewxwcPCCn3FESaydTG gU1r308NZTrh+4sze6w/QKI4m7ffp3TPGvjS4ry9EfwmNX/2YynP2Jdhzhfr6Fake0Xc76GG 4lxe2Bj2EkCcH2H91ffxhobkeoyf9cF5UqbJO2oT4Yu2cQh8Mmznj5BO3F0rc1+xy4IlQB54 O+BV8A1h4WIgs/aZw/nzeArI7ylwX/EUBEuAPHDo3FfBN3DYOho8YT8fXAUsl/yl4FrNHwS2 2FXBE85fg6uA5U5WcNdZwg8CW/Tdj/Om9eyDn7UveMK7JbgKWO69WOhqh007eML8MLgKWG7m njX8ILDFtN1RwHJnhOtxfgmu8tQLrpD8x+ANHie4yBkRfBvYbbcLnrCOBEud5qhH4+BKe3tw F8JDFNR5iJMm863w1A8uc7YGd4XCFwWvU2GUlRbcre6gnD+ttwlN8TZxPd6ngiu8fw0u804W Oh0+HLxOhEP3R34f2f9B2lr5+C4KMFrLMRpSr++nbAb+AJSGhTeHhQWywvgFpcf3aZg93bXA aiAPYdJhgRwgxuwZfFvzH4AVQGdgBlB0ljtztaG+0yX6LswqjTVnCTcCYoDisLszg4AF4g4N 35f5/8B/cr/3P7oL/MzvQ593DdOI5CvC/PLfw7wLSefp//tQZ2xunkbBmWE3xjgW/AZymr6z tVHvFWToPZLz3gcO7QMIX1zMtf8z6f5irQci9KG7YP8jeBb/Pi5kzr+QefhC5rELWTsi53Pw kZHhM+bDJsHcWvMhwmx/sM0hz8jC7YlwHmZPhOyHesougH9wLcMZJe+LRcu7hYXwdwehrhXq Hpv9R733P5NinXrUUJ61ltNubx/IrsquqLmLCL9pCXztd2A/3E2LxL00YI/zK3USEPfgxP04 eyryNiArdH6BdF6vOgficx7rKGWJMykBfaeuaa17deHnFHk0InQ/TmAhLRB3LsU9ONmem9Q5 A9p4hWcyXem5mK62W9HV3oZkibMipylNdOLQhjco26mDek2F//6J8jPF3ou1Hb78PnVXDP0p 74RZ3yF+CPpsAebxDxB/EnIe1gthB7WkaOlzClRQZ9hA0da3sJn3SWy1D1BLAXn/7G2E46iZ 2COxx+p7YU/RVNFX1mG6lM8U4J+OD+0tqXtrUWL/xc6gLcCdoftogLWB7Fp3g/dRZ3EXTtwx k+0pV3vWwgf2jKMc5x6060+U6mlLzTxpqEcypdk3os5iX78r6rZT3sPrKOeMJpDHqMw5pO8F tlb3/4COqEdz+y7EGZjHlmK+u58KpG0Xdk/Ubky9nWRqjf6fI+77AWXOaPIJiHuF8r6hi7zZ ZMg5s0zfC+wu9oRr9pPF32WI8gX0HUVL7gGvpx0SfAdR2JlfyjuHNTiF9E3wrNWqPXZzvW95 lIY764AsWmh9QAsxjg1PS9RhHfz3JLShmIrsSagXLP0oUveDhTQfA8TfKY2DLg3yOWArhf1R k/sPIN5uQOLvmtrL77PK/U345FYmrWNf3X4QWGJEI+60eQ188u9pNP+9Emz0juKOmdj3c7qQ z5uD8T1U3vn0Ob/Is75Y8R1G7aSedl83aK+iOLuCJtpbyIe8PlGGuH8GiP464myjI+J+kdeg 5yDz7DHG+/YYesEm+EZkPK/A3P1VnP+i7RPF94yyFtiHqK+TR4us1ykGdSq1u9NUuwW+0WzK sOviWxtE86wOeF/ifqwGfLN9GgckdrkbBexPKcv7M0V7P6cm3rvwTc5GXTEHOXWpvedhyAM0 zjsQ38MbFCfuN9uV1Dpqkvz2+4m0AqJ9zkxq5/SS9ytjnccgiynWUxff1ChqJu78Wu+4+73J GNP3UrYnEfML0osx7qmkOc6f8Z4zqBG+8zI8NwVtEut/O3mX+VJq5z1JhU5DKvIEMBaR3roX eE36pR/hvWxS7ziYLv5WTficxmt4/2K/rdxNjd5BT9iHabN5mFYLgFdAzhf63wP8yaFqDFU3 59EUuhvRPgxhYbFfE1oHnpf3HTY6acZX4o46pxVp8IMVgT4Djos/36tV3nkQ+ROqT4oqU/re DfX9/BQdN1TjfgVZx6ky/X2AuMXfTvNaOIcv0kAi3NarrEG4TRZmV82DfXJAAWnOYU+gn/H1 VrcClgKjiU4HgVN4D3RueT5UH4LsoXDaPRNV/HcJe7QEqmM1ekUgR+MaDYy26qkRuEGhqgxy nrp7U/UD8KP+OwmBvfp5hTrcXUOEp+o6n4ScA/kT5AKNcv03GCc1uqs2iL5Sex86PhwYAdXX Qn6sUJ2qULVTQZb7kELVF5AjNHS66pXQf1KTv+oP+m8ywrEZuFNjvMZtyLtKY77GKQ3uq2s1 /qAxV2O5QtVpheqnNHZqFGnofgn1B2Ms0EGjs0bHCFxRG+Hly35I0RiiYdaG7NtC/fcz4SjT OJf+ygjwmNiuxkT15ep5kfnlWDXDxmxEOdXPK1Th6656QKH6r7VRNVNA7DHATzioQK3E+f4Z 9wf0ud6FzJH/n7Cvpwcwv/tpLMVW1LF8leaaJ+q0MIaDrGayismNTIqZ3MBkJZPrmVzHZAWT 5UyuZbKMyVImS5gsZrKIyTVMFjCZz2Qek7lM5jCZzWQWk5lMZjApYjKdSSGTAibTmOQzyWOS yySHyVQmU5hMZjKJyUQm2UyymGQymcBkPJNxTMYyyWAyhkk6kzQmo5mMYjKSyQgmqUyGMxnG ZCiTIUxSmCQzSWIymEkik0FMEpgMZDKAydVM+jPpx6Qvk6uY9GFyJZPeTK5g0ovJ5Ux6MrmM SQ8m3ZlcyuQSJt2YdGXShUlnJp2YdGTSgUk8k/ZM/EzaMYlj4mPSlkkbJhczac0klkkrJi2Z tGDSnEkzJk2ZNGHSmEkjJhcxiWHSkEkDJvWZ1GNSl0k0kzpMoph4mXiYOExsJhYTk4nBhDQx XCZBJtVMqpicZnKKyW9M/s3kX0x+ZfILk5+Z/MTkRyYnmZxg8gOT75kcZ3KMyXdMvmXyDZOj TL5mcoTJV0y+ZPIFk8+ZfMbkUyafMPmYyT+Z/IPJR0z+zuRDJh8weZ/Je0wOM3mXyd+YvMPk r0wOMXmbyVtM/sLkTSYHmbzB5HUmB5i8xuRVJq8w2c/kz0xeZvISk31MXmTyApPnmTzH5Fkm f2LyDJNKJk8zeYrJk0yeYPI4kwom5UwCTB5jspfJHia7mTzKZBeTR5jsZPIwk4eY/JHJg0we YHI/kzImO5hsZ3Ifk21M7mVyD5O7mWxlcheTO5ncwWQLk1ImtzPZzOQ2Jrcy+QOTW5hsYrKR yQYmJUzWM1nH5GYma5ncxITNHoPNHoPNHoPNHoPNHoPNHoPNHoPNHoPNHoPNHoPNHoPNHoPN HoPNHoPNHoPNHoPNHoPNHmMhE7Z/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/ DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/DLZ/ DLZ/DLZ/DDZ7DDZ7DDZ7DLZ2DLZ2DLZ2DLZ2DLZ2DLZ2DLZ2DLZ2DLZ2jMGPCwKruaLNgLaw mSvaNIVYpUI3VrTpC1GsQjcosbKiTT2I61XoOiVWKLFciWsrLh4Esazi4sEQS5VYosRiFbdI ha5RYqFSLqi4OBFivhLzlJirksxRYrYSsypaJ0PMVGKGEkVKTFeisKJ1EkSBCk1TIl+JPCVy lchRYqoSU1S+ySo0SYmJSmQrkaVEphITlBivxDglxiqRocQYJdKVSFNitBKjlBipxAglUpUY XhE7DGKYEkMrYodDDFEipSI2FSK5InYERJISg5VIVHGDVL4EJQaqfAOUuFqJ/iplPyX6quxX KdFHiSuV6K3EFaqwXkpcrkrpqcRlSvRQhXVX4lKV7xIluinRVYkuSnRWopMSHVXRHZSIV2W2 V8KvRDtVdJwSPpWvrRJtlLhYidZKxCrRqqLVKIiWSrSoaDUaorkSzZSyqRJNlLKxEo2UuEjF xSjRUCkbKFFfiXoqrq4S0UrUUXFRSniV8FS0TINwKlqmQ9hKWEppqpChBElhuEoEZRKjWoWq lDitxCkV95sK/VuJfynxqxK/VLQYC/FzRYsMiJ9U6EclTipxQsX9oELfK3FciWMq7jslvlXK b5Q4qsTXShxRSb5SoS9V6AsV+lyJz5T4VMV9osTHSvlPJf6hxEdK/F0l+VCFPlDi/YrmEyDe q2g+HuKwEu8q5f+xb+fRTVR7HMDvnbRNaZomKUnoPmErYKG0lCUI0kAhgKUttB2kLRRL0yXQ 0pIFZClUEcSlgIqK4oIoIkYxHVYBAcUN2RRcQRHcNwR3BWvfd/Kr57zzzjv+8Tznnec7E/jM 9947d25mSn63cE45SXGC4nWK12jKcYpjNHiU4gjFYYpXacohildo8GWKlyhepHiB4iDNfJ56 z1EcoNhP5/ZRPEuDeyn2UOymeIZiF83cSb0dFNsptlFsla3ZCFm2liFaKYIUT1NsoXiK4kmK AMUTshX7Nd9MqzxOsYnOPUaxkeJRikcoNlA8TLGe4iFa7EFa5QGK++ncOor7KO6lWEsX3EO9 uynuolhD5+6kVe6guJ3OraZYRbGSooXiNpp5K/VuobiZYgXFTRTLZUsFYplsmYG4kWKpbKlG 3EBxvWyREM2yBZsxXyJbBiMWUzTR5YvouoUUC2SLCzGfLr+OYh7FXAo/hY/CS0t76PI5FI2y pRLRQIvNppn1FHUUsyhmUrjpulqKGrqzarq8isJFMyspZlBUUFxLMZ2inB56Gt3ZVIoyeuhS WrqE3mgKxTV0u5PpjSRapZiiiKKQYpJsdiAmymblHQpks/LxzpfNSxF5srkfYgJNyaW4Wjbj 7wV8PPXGUYylQadsXowYI5tvQoyWzUsQObK5GTFKjnUiRlI4KLIpRsix+P7Or6LecNlUghhG caVsUj4aQynssmksYohsmoIYLJtKEYPo3ECKLNnUFzGAZmbKJuXBMmSTUpv9KdLp8n70Dn0p 0mixKyj60GK9KXpRpFL0lE3KV6kHRXdasxut2ZUWs9EqIkUKXZdMkUSRSJFAES8bpyHiZGM5 ootsnI6wUlgozBSdKWLpAhNdYKRBA0UMhZ4immbqaGYUDXaiiKTQUkTQzHCaGUaDGgqBglMw R7thhqj43VApthlc4m9oX4ZL8CvGfsHYz/AT/Ag/YPx7+A7nvkX/IlyAb+A8xr+Gr3DuS/S/ gM/hM/g0pkb8JKZW/Bg+gg/hHMbOIj+AM/A++u8hT8MpeBfe0c8S39Znim8h39TXiW/oU8WT cALt1/Vp4mtwHI7h/FGMHdHXi4fRfhXtQ2i/op8pvqx3iy/pa8UX9TXiC7j2INZ7Hp4DR/sB HPfDPng2eo64N9oj7on2irujfeIzsAt2YnwHbMe5bTi3FWMytEIQntbNF7foFohP6RaJT+qa xIBusfgEbIbHYRM8Bht1/cRHkY/ABlzzMHK9bpb4ENoPov0A3I/2Oqx1H9a6F2utxdg9cDfc BWvgTrgD192O9VZH5YurogrElVE1YkvURvG2qE3iMk1P8UaNXVzK7eINUrN0faBZWiI1SYsD TZKuieuaEptymxY2BZpONzliI6IWSQukhYEF0nxpnnRdYJ60W1jOqoVljuHS3IBfCvOb/T6/ 5gc/D/j5aD/P8HOB+Y1+m18T7ZM8kjfgkZhnoqfZE/SEDQt6znoE5uFRu9oPbPUkpjiRjkUe vdE5R2qQGgMN0uzqemkmbtBtr5FqAzVStd0lVQVcUqV9hlRhv1aabp8mlQemSVPtpVJZoFQq sU+RrsH8yfZiSQoUS0X2SVJhYJJUYM+X8jGeZ8+VJgRypavt46TxgXHSWLtTGoOHZ0nGJFuS xqjcQH4S7oQl8lEZiY7Es4kXE8NYYjDxQKIm1pAgJgh9DPE8pyCeN8QviV8VrzHEHY8THHF9 +joNXY53+aDLhS5hnR1d+qQ7mdVotVk1FuXZrHnFzlBmj6bMHBR61jxr91SnwcINFtEijBEt nJnOmi6aNJb9xuNGwWDgBkO7QXAYMN0QI8YIyqE9RuOIyRziNOhFvaAc2vUaq0OPEWXFXtET i50GnagTpGxdgU5w6LJznA5dvwwn03Ab54wbEZpI5S64RXSirrdaeTjH9/PW4qK0tNxdkaww Nxg5sSzIVwR7FilHx6TSYMSKIJNKy6a0cr6ypJULOcVBc+6kUuova2lho5Jzg8lFU4Lrk0ty g81oOJRGOxosudXKRpWklXv93rQ0XzkO5V5fWug3etyv9NKUQeW314e+8ssf6rO0P33RNMR0 L16+PwZ9aX/rF/973/7/wquV4SM6ZWS7cCNzCUvhBrgemmEJLIYmWAQLYQHMh+tgHswFP/jA C3OgERpgNtRDHcyCmeCGWqiBaqgCF1TCDKiAa2E6lMM0mAplUAolMAWugckgQTEUQSFMgolQ APmQBxMgF66G8TAOxoITxsBoyIFRMBIckA0j4CoYDsPgShgKdhgCg2EQDIQsGACZkAH9IR36 QV9IgyugD/SGXpAKPaEHdIdu0BVsIEIKJEMSJEICxEMcdAErWMAMnSEWTGAEA8SAHqJBB1HQ CSJBCxEQDmEj23HUgAAcGHNxjPHfoQ1+g8twCX6FX+Bn+Al+hB/ge/gOvoWLcAG+gfNM+bli F/8KvoQv4HP4DD6FT+Bj+Ag+hHNwFj6AM/A+vAen4RS8C+/A2/AWvAlvwEk4Aa/Da3AcjsFR OAKH4VU4BK/Ay/ASvAgvwEF4Hp6DA7Af9sGzsBf2wG54BnbBTtgB22EbbAUZWiEIT8MWeAqe hAA8AZvhcdgEj8FGeBQegQ3wMKyHh+BBeADuh3VwH9wLa+EeuBvugjVwJ9wBt8NqWAUroQVu g1vhFrgZVsBNsByWMdfIZo7656h/jvrnqH+O+ueof47656h/jvrnqH+O+ueof47656h/jvrn qH+O+ueof+4B7AEcewDHHsCxB3DsARx7AMcewLEHcOwBHHsAxx7AsQdw7AEcewDHHsCxB3Ds ARx7AMcewLEHcOwBHHsAxx7AsQdw7AEcewDHHsCxB3DsARx7AMcewLEHcNQ/R/1z1D9H7XPU Pkftc9Q+R+1z1D5H7XPUPkftc9S++p3gL71K1C/BX3rFTS9n4Yz97tWcUH6WnWnZUJbH8lnZ XqbHR9rKruTbt1tGj47sp92Hj6vAbPjARzLOcxyGMEG/MyEhu/vOQREtGtN4/ON9W7a2BVt5 dtuZtmP9286cjx3a/zzv//65M+eM3x4zDe2fde6Nc5kZ3NTVFGKOEbRac0T3bunCoF6pg7Oy BowQBg1M7d4tRgiNDRw8ZIQma0CKoDH/MTJCUPpcc+K3Uk1BW4SwuHv25KzwlASDWR8RLiTF xfYb3tNYVNZzeHqyVqON0IRHansPGdUtt25Mt1NaU7LFmhwbGRmbbLUkm7Rtp8NjLn0XHnM5 J6zu8hpNxLCp2T00a6MihbCIiF0pcfFXDOs6frKhszFM19loskZqY03RvUdPbVtuSVLWSLJY aK22PMbZGL5NSMf3bAOL2ca0uvNhTHnyo3hYPF/Xbql4lqyuuHMhPdb0e3ksXnxDpL5TOP+1 V4qYmpoSYUqgn0Llo1QqlUqlUqlUKpVK9beyQqVSqVQqlUqlUqlUKpVKpVKpVCqVSqVSqVQq lUqlUqlUKpVKpVKpVKr/PhbDtuCoCf0nZVfoqLS1bC56nP7vMhvATnW0NSyGR3e0w9BO6GhH oN27o61lw/hgZZWwThhJ4nM62gLmtHS0NRhf19EOQ3tnRzsC7ZNoc7RxP/xCRxv3IxSxzcyG e8lgmTjaWB5zs0rmYQ3MC9XMh7EctDysMXSswIgbrdksHWdGsjr8srFCjNWwWpzzhnpVyCrM noujCzNzcF0d5szAmBsz3KF5FeALrenCvHqkh83CmPK+yplajP77O6oJ9f24pz9mVyLr0a/A nblD75++2TYgI3OALc9d6WnwNlT7bDkNnsYGT4XP3TA73Tayrs5W6K6p9XlthVXeKs/cKld6 Xr5zQsHEtJyKOvcMj/vPeh1hc3ttFTafp8JVVV/hmWVrqLb5aqv+6S1rPA3+RmW4sqG+sWK2 u8qbjgfKZ042gRWwiSztX740ypeuBg9WF/pi/NnM//Tc/+0fN1MqxZDKbczIDuKzLSD74xQz re5hRD3wUCWF7yrUHLqqcbph+I8sPjJUWnu+WnREycOnti69fKnt1k5fa3egq9RWqPb+IcAA VMsbVA0KZW5kc3RyZWFtDWVuZG9iag00NSAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUv TGVuZ3RoIDI2MDc0L0xlbmd0aDEgNjU1NzY+PnN0cmVhbQ0KaN60Wwd8VUX2Pre9F0KLNIEg vPAIHUFEREAIIYFAKAmhJKGlkBB6kSYgRkCEAK5iUFERoq4iAr5ERVwbuqgoFnQXy7prL6ig WFcgeff/TTkvL48i+9v9B76cb86UOzN37sw5MxMyiKguFZNFaSMzunY/+a+970HzTyAnf1bu 3DtTVl9K9HsmkfVJ/qIFvsDdB94hMvoSOS0K506d9dtvw+sQeRBfq/nUmdcWLs/vf4JoLuJT VxQV5E459lH3T4lc6KhnERR1dzcoIKq/AOE2RbMWLBnV7anPEb6TqG/pzDn5udYPb/cjevoZ hO+ZlbtkbtzgtvHIfxjpfbNzZxV8seCNg0SVoj6L5865ZgHqjZ/KXiJ+7vyCuTMeNYNEwzqj +Biy7E7GLeRQlLPFuRy1bqmkdZjWmBRFZn3HNE3bMu1PyHQTaJeLUkR/0PAMn48SiIKuh4Jk HPDea7b1kbFNxFlPOvXE08STvfcizW0U/pNG0+ka9GcxraGNdBs9Tx9SHq0C20Lb6UF6mAL0 Ar1K79H/8Cd4rTOL6lhPkocaordOuceDDwL7UNNqzW0INbR91Ro3xv0+Qvd98DY3JrjP04Ci Zd665jvQ/mxUuafM/iLs9hRh8ybw+jLHj957g48GH4rog3TKpvE0gSZSDuWi/VOoiKahZ2bQ TJpFs2VoNuKm4nchQpORKh+pBK9ONYfmAvNpAS2kRfg3F/waHRJx82R4IS3GvyV0LS2lZbSc rtO/F0vNcsQsleElwAq6Hm/mBlopGUulWUWr6Ua8tZtoLa07b2hdiJXQetqA93wz/emcfGON 0C34dyttwngopc10O92JcXE33ROhvUPq76J7aRvGjIjbDM02yUTsM/QyPUF76FHaK/syH72m eoT7pVD24Vz0wXK0cFVYjVX/LQ711gq0XbStRLd0CfQrw3Is0v0oUq5CSlWKeg+ilOsieuIW tEHx6hap0GbZ/mpteK+cT8v9cU9Yz9wtQ4JFas/Fb6et+ALL8Fv0qmD3gSu2TfJw/b2htNtl +H56gP6Md/GQZCyV5kHwh2gHvu2d9Ajtwr9qHs6U3EO75ZsLUDlV0GP0ON7kXnqS9kn9+eLO pn9M6ytCmqfoL/Q0RshztB8zzYv4x5pnoXteaw9InQq/SH9FWKRSoZfpFcxQr9Ehep3eopcQ elP+PojQYXqH/kbvGXXB3qZv8LuKDjtfUD0agDXhL+jne2gSTUoYPGXypIkTxmdnZY4ZnTEq PW3kiOHDUocOSRk8KDlpYOKAhP79ru7bp/dVva7seUXXS7t0bt82vo2/daumjS6KqV+3dnSt KK/HwcxsUOdk/6AcX6BtTsBu609J6SLC/lwocsMUOQEfVINqpgn4cmQyX82UCUhZGJEyQaVM CKU0Ynx9qW+Xzr5kvy/wRpLft8/ITs8E35jkz/IFjks+XHK7rQzURSAuDjl8yU2LknwBI8eX HBi0qKgkOScJ5ZXXjh7oH1gQ3aUzlUfXBq0NFmjvn1tutO9nSGK2T+5djnWprnhswIpPzp0S SEvPTE6KjYvLkjoaKMsKeAYGvLIs3zRRZ1rvK++8v2TDvhjKy+lUZ4p/Su6EzICVi0wlVnJJ yU2BizoFOviTAh2WftEUTS4IdPYnJQc6+VFY6qjQA4yAEx/j95X8Sqi8//ixmppcrfHEx/xK goomhroJ8cwJdUMN0b64OFGX9fsSKA+BQHF6pgr7KC+2ghK6dsoKmDkiZj/HNB4jYoo5JpQ9 xx8nXlVyjv6/qKhpoDjP16Uzel/+j8d/xPsCVtucvPwiIXMLSvxJSarfRmcGEpJAEnJ1W5PL u3VF+twcNGKa6Ib0zEBX/9xAI3+iSgCFT7yDaRmZMovOFmg0MADDSOcKdE1OEvXyJZfkJKkK irL86ZlP0eXuJ+U9fLGPXU49KEvUI9BkIF5K2+SSzCmFgVY5sVMwPgt9mbFxgYQsdF+WP7Mg S7wlf0ygwyd4XJx8osyFtkWk5sSi5d74KF+mGWtlibcFhW8QfvkT+yIiBq9LBsUbTezryzRi iZPhKTqFYDXKQcCKH5gioiyRdWBKbFxWnPo5T5VidZ2c+EBUWFkxUITqpJ5zzqqp1KJCHXzJ BUlhFaxRqKMrqEs7ez1N0Rf6wcgRJV5nCkdZ8fhyoTNRjFSJt9jUF6A0X6a/wJ/lxxhKSMsU bRN9Ld9vaoY/NT07U75tPUpG1wip+F4qFKA4RHPAHIgxOKhTLL9WGR4sw6FgSkT0EI72lUT5 UzNKROF+XSD58AWh0Z62Q3LX92rQA5/mIMxu/kG5fl+Mb1BJ7j63OK+kPCGhZG5yTlFvUYZ/ yJQSf0Zm31hZ11GZ18UuFY9qQKlG6ujELp0x9ySW+4216eUJxtqM7MynYmDlrh2dWWEa5sCc xKzyNojLfMpHlCC1ptAKpQj4RECUNAqBKJk+9ilY0MUy1pYKGc7fZ5DURbHOoPx9ptLFsM6E zla6BKkTP3hJTYvQxZhuk31TxOtZnlVUkpMlPi5qgleJ/0bA8PejgOnvV26YnjqBaH9BYqC2 P1Ho+wt9f6X3CL0XA8NoYqBzxJxUkuPHPIUBlUmxhhqKlijSt891R2fGvRF7PCsOQ20CkJ0Z qNUJc78TPxTpBgvkQD04UJyfK+pBYzJFXm/8kPwsDFsuEEmGBGqhhFq6BKQYJPOI4YhM+Xg3 eIEyfzECgeKsQFYn8dDMaVlyOMcEKMXfG69dlem0FQ/qmlXSwN9dfpv4FKLjbxKiFupGGZlK E4sgHpalOslbBzXP9yMqP8eH3rYpPwNDXc2l0bFKU4Ap0W5bIBEdqyNJNMuKr103OlDrUhSI /4LXvlR8kk68NytLVV6GbtIJ8OyYQG3UqG1YV+oM6B1EDRF1wf+bUFWR9AVRTPo+GuVfgplF VFqW5EV0oG78kFxM/ip/bWj8vThzlJgjausyDiitV7S8Dvrdih+9z33If21c2E+Xzn6xOIiB SbFPYWBTVkmkIjC+U5fOUZHaulJdUhJV9+wZVH9F1Q1JofQlY9VQPqbyK6O3nz51anutY8rr rP6p38auVx0y3iKyy8h/ofDEuq8L2Nm0y06i3LPiGOKO0R22S7EC1lHaBSRrOUgjH5gM3KD1 u6zdtMupQ+MjYVeiPMBJIJ9p0y7TdodCtoe8CrgMSANGAsugbwm0szch3Ubymhvdh+32yA9Y EyVusPI0n0st7Em0y/Meyu54FniBYZT/hxip4PmB8u3WeBbg5IFngitkCIn2DdZoDDQNhb+i +uFwWtPOC4VdQq29LenqSNjtqBvKankGnqc+Gs2l/IViLhTOBPczAdumMusQzTob7AIqA6bb i6m7gFWMtMWoi5I+jc5AByBR68usNORbSTPPwBLol9AGeyslGMeozDjmZkI2g0wB2gFjgFHA POgvAprasVRm9iMy+7kbrFdRNmB+InGT+ZXmJ1C3I1Tm8aD8W0PYAiyRvBDYSYV/iL8ooJxC 6yU8C7DLwY+DKyRLOZKGKLi/Ar+FwlnUwspyg0piPG6kbcA9Wt4BLNT8DFhVFOfpR1dGwnqd elqr8M4iMY2SNKKkPEITItDyLDoJT1cFuwdtwfeTrTECGMdh7xzK9vwLMBSQNsfeAEwHelCu dZomXgjMeRTvuYvio45QvP0I+N2a943AyAhovWdRBNZFQOtrpK+FZwwMK3tVdZx9XMFpSPHe 9hRvHaArIiHbeia22D3c3fZA96TxLt1ovOvOhqwPmQ34gPlAJjAV+ouALdZ+utFuSWuNb90j GvnW/dBriDRAR7OFlKnGaWphVtEWzxTxrBoYIeV97lYpe+F91MTIM3R9FTyvy3fH5eSYr9EW Bfck5GwrjtIVMG7j3CoOO3sUUNYW40ek30Nx5gFAyGeorf0VxdkLLwzo6zhvKsb3BxcG1LMU uFnLNcBwYJ3mpeGwtlJrZx9dEQlrMeakbdT6DHSgLA2vlL1ovpVLU6wlGKu7KMn8kmaaI6RM MffRYOMFamPegXf0Dc008inXmOW+j/BMYxLms7FI+5VEssyHPMZvkN0o0fic/CKPeSO1sn6g zuYKrHFrqJV5JSWaozGfLQRKxapdFUVUedQce6YO9SNrMiB1lduAqRG6rcA0w0X4LuA+YIfU FwA5VhuU9yt0g4CpUr8dWGG1Q3gIMD1UxnVWHYTrAxdJ3S7gYfNW5L8T2C513wCfmbAxzBeB J5D2BeBT2BzS+qgcBVxmvAk75F3gTQW0ZbgA2rYacql5vZSLjH/TavMytlfcdcIGsTKwvq6m 3sqGCL4i1jRlLwTvFWuzsheCcBPcUdIO2ExteL1HH2eoNdxtIvNg3bYegW2i1mGsl8HZQnoa 4plYTz1EtzhpNMlJC57kNVGsheZpucb4Q2sZ5la9bpXZj1OhWrfQtmPuaLkefUoX8bpj3UST QmvJErV+WOMpVa4HYXO3g54S87qTSTeJ9UWiBLaWQAK+0+4Yj5uw9nVDuj9jjALmQcwBwxAn MADz0RLymN2p1OzuHgOWAvXlvPI42lcIeQfGuknDLQvfDs8JM6m93YAWIX8W3v8EqxlZ9hi6 ReM6oInTk8Y4fWgM2t3AeZhKnU00RcBcJ99lNPpJvOuepkN3hNAG496l2QLyfQ6n3fJ9ztVY hHfUjqww2zHXU4RnvEapjrCvNLQ9mCZsvZC99TlZnlPAe8pu9FrVdpx9Ur1nYaey7YV2KuzD vFCq3rXTAml+BebTAs9PKKMl+HdU39MUMgHIo4l2LuV5o8Dnwb5zkf8n2G4Y2HJsfE/3STup kUY7vO9iqhdmD3V2lmANLqZx9jrEraPbgc3axhkj7Be0tUwA79aQ42WJtkkeBqbrsSLsLrYj tmLMboXN3RXtiFbjxb4ZeaYh3Sma5fHD3klGeDJd7KyC7ijwBc2wTsB+6Q7uYn2fTK3sfABf INZwQ+qx/tsD0S9ibB3BvH5A44hYg9xM2HkXi3UifA1H+f1gE6TaGRh7GbCpMrCmqTVwvljX rL0Yb4DdmJp4TGroTKPJ9mCsY+31WnUZ0FGuP2tCNodYZ5pRtFjr9Nzc1HqHWttB6DF3Yyxu sS+Xa2ii83fa4gQRHkrRzmjoXgTWY2xvRN1eBj9EvewM96RYm/G+m1qz0TYNjNU/C5h3G9Hm 3fS8gPUE3QhMkvgIYzuHjgPl1hRairVgMsZxRzGmgafF+HbW0O3QbRB6lnhHa4FOLLWuk7mX FgD7WdrNYPM1w/egpXUxGebHWBMeNUqsSmMPwrUR7mJegzUEsCphTwLefrQ5HNCdtCrphdA3 N4tuBJaaC9CmBZRtrqaxwEIzAfNqAvRDKQBMPVc6lHUvsBhYAiyyAzTDvhr2QCVNB642DtB6 6wpa72BNcrA2ef8NYN3w9lXSs5seFYD/Wew8QP2dXTQc7SXk7W8/RkOg7wg+DlLYTpngTwFD Ec6AnIW+6ATew/oZa/U2fL/PwX/chnTbYKfF0ZCoyzFXVGJ+/xxj/CK6xC6lyeYhzMvHKA9I x/hobb0H2ZNWWBWw2XpiPuiJsV2PUoA9wHxgKuADCoAZQD4wSmIg+mYjNbNuwDx4DebDXdTW KkI9nkQfDKGuGBup1jM0CvVJAzYCBUAe0BuYKuu8DeNnG8Yr0pxRv/YXXL9uZ6sfvo8U43fY EAFKNXfTAPNDijcfxBj5mMZjXe5ufgr9x7BTvqV0yHTzMI0znqEcIPO/yWtupV7Gr3SZOYr6 mkMwLodSI3MQ8qRTN7MXtTbHoazhKPtC05W7qVZDSnImA1hLnYu1vBTIAF6lERJTabDzJHAf 8Aa1c66jZPBkrO3CnkuJGkEp0E3wvor3VYl1vZKGATlAJ2CS5lkAviG8KxU/BhgrxrPzDXW2 HbrC8zeahnefax6H/VdJUcLeEHaAWDM9BZiLR9N4uwkNxTd3F3A78KpEPXrUW8/ozTJ6BN3l 6QXfrZDaGyWwB/4h193/EsbhiD2aZkBj4BIdbhEGqQvttxyFr3jUPQp8o+VRocOa2hjYft49 j9JzgPcmXj47auxFhPxL92mgHNinAJ8yxEO6CWHrSzfrtPuhxgfAIaHH+tJWrDHVPo17FPi2 WkK3/QwMkZL9g3dC2KDlICH1emMKibU3A33fq3pvxH0W2K/lQa07WBPQsX1Y7J4AHgK2A/cB N0Mv9i5qAaVh+wtxQOswWWgfOwf0noDTOIS7tFwopLIj3R+FvKBx9wIVOm1gNwl4YOPchjlV YDnqD5tJ+HTC5hB+a7hPHu53w49oYX5NN1serN2pdLO5A9iAcBLC4+lm40HgEDnmJ9AjbM9C 3ELMmwux5rwveTbW3nFmMQ3C3GDDjhpnfk7N7WTMFU+g7PXAPkqDjVklYBe6bjisFwSwvtSB rBOSpvAhBAzXdcOBMmoJmDtppcadAvBJVofpFK5HnQHpL91Kq/EdVkHfCGgo/a0Q8EzhZwn/ Sa7HwF3K9yJy4bMFh+GZpxWC/RWqXhTQz22E8ldBNgZuE7DuMoap/Krdqt7C1xIy+KSuRyPx LNEPog38zEjYBjWyDWOwKM3cKdKiL95UUH0m9PK5BwWsH+kgx7O/Bv12q1zUVeX3TqC+3glC hoP6ew67rgC4pZFgfEzdJL6m7gL0OyUJmF6sCQK1aJiAsRVptkpddwmttzSMyRqjqKnEX6mJ xPMYowD6Pz0c6PtHrGcxTpqjDwSakCHRPAIGmeEQzxD9gHbLvsC3V1/6LgnUUvoEW+GPuRTr rJD6YZhPZzrx8M1ew5jf7b7r1MNaUYJxmwa/pS1sdfik3lqYGzsiDvOqpyvyf4G8vF8Mf9Tu r/eFhe8p9nwT9T4ufCFRLtb+oqhHaFdUY9rlEb7OYJT5JNAI3y3me/hHveWcfbb947B9/dB+ e3u6hud5lB8VtVmVLeK8wof+u/Kf4YP/oNYT91O0czb8bOGLDUO+PtLXynSfRztm4zldxbNE feU+PuYU1Hk4/O8+vB5Fri9ifUD5H9hJ7tfWRIq1vsIaUEpT7Bno22T0G/x4PPdes4y88HXy 4eM0xzweK9sjziYUtoSdR9QAnrlaYyXQQ55D6PMHPm/QaC8k2tUTmMdnCcB2fZ5wBZADFAp/ k3HGWUJE+/icIOyMYHHEGcHg/+R8QJwDhJ8FCB82dAbwPDUO7fuLvnzRvRt+Uqx4nnwX8/Dc z/AukrCm7YY99AR006md3v+zrcf0Xm43sTfrfu8ZqPYGxd6BOYDaWY9jDhkGf6sfZUk9/DTM 6XLfD/ZSrNwzE2O1EHZwEaV5RX/th+3UEmmP0Fj4hOPk2tyDlgJrw4F1PQ9pMgXk/vMw9zO5 53o/9eZ1HmVfCp8yR5ar9mJRrvu8shmQXtoGwTfxnALYAcdFHvM19xrzNYqxe2AO6EE3ybHZ A7b3G2insKWHoc7a5ojcLxU2gLmO7rS/U3ucntsox7MJz87Dui58VNFejFXk7WsmuP8WkPuo LvrqM9gR86WvM1+kNX6Gf9cB88cdGGPwN6WvXb33ukb4vWfbW47YM+/P++bcfo2pQENh16Dt rTSyw/aTZ2D9Xqf3oAWyhG/NCK+HhOqD6n1jHa/3h0uAaPSrW70/LGHJ8bBH7wPvcd8R0Huz A4Bleq92jbWVjPC9Wbkfy3uyHRCn9mBJpEUZL8s0Ig59ZvxIGXIsHqEOiLvdzkf7PgSSkOdF 6ol+7GN+T32tZhinfWgMxnyU2KMBGlmHKEX6l+LM6m9SnwF7bL79ABVaJVRkpcF+XEkz4Xc2 NLvDZjnmBsU+nqc73WrfijjYZc4mmo1vKkqf9WTIPbxVCIsznXJln8FPVGcwt8C+vY1mWHfS GO+bVBY1Bt9hNpXBh9nleYvKvEX4HmEv4jmDpc23kW4/4+wn7EyOz8pQp1FsO+IZxGWLOM8Y 2G55tF3uOf7ivqTsUdjcxTTcOBY8jGfNRb5LZN7j7gNoxxQ8h+SzUF95Bneb3HMaZ21AG7Q9 G3keJu1MEXeI2mAOaGdlud9ZV8HXFWeyGxGuwpxQDDuhH8peL8/J2iFPHTxjjEiH72EX3vEu +T3k0HHeY9WYHXbGKHCDlptRl45AW2AAQMDQ0Jki78UuobsAn+Bob0exz8bng8AKfUZIQHug jdhzY4SdESpEtluf/YWd+/UDbq0+95Og6jM/iaZAM/1Or9VyIZ/thZ/vyTM9PtebRo4+x5Nt QRnRMo3ue9nvk+BfvASJuth7keYHtS8tx3oa5o8t0LPdPlgj/Fwt0p5fqRF+psbnaBdwnnMh Zzj4dm+vPjeTe359rLur5z+5FgBOLHx1deaYal8B9MHcN0DNsRLpiNtKrazDsCEul36dmqcw P2CO+1nsgYtzNPNr9yHzpNAhfg3mvHwqlZBzn/uizJeh9iMdrIFyX7snjcE85w+Dmv9uplLA j2/6Rgkxt3/rHjET3d+lLHEPYP4bIOZAzCvt7EVYA8bQLTzfyXksHXUWc9zfgGcwfzxNY+U6 UkqTpESbHS9NFnuwaHM2bKFssWcqysZc3k7MbbKfdB7PHKxLf6ccbzP0yc/o3wMU5yxFX9fB O9uDtNPQxz9QZ2Au2nvEHu4esd7FnFLf/RxrbZ7dAGUeoumwC7bYWbAl+iP9HBojfGxT+DO3 wj86Qd3k3q3opwXo90OwbcT+9A7Mie2pked1tKEobK3egTLewvoq0B82yHR8kwWU6rxCqZ4p 8Gs+Ip+nHvpjJCVaXWGPiDUE79H8CfkQZ6dBogynK63CGmoIHxN2OAk/0zyN+rKfuYPSLsDP VL5mBaUIf1P6mtrPlD6mONvbpc7o7E76nE+f8Ukshl8qcAd1FOd84oyvxvneCOoppT7rC53v fQibfqw65zOHUl3zOfBBiFtF7a0CjK/J8F/EuaE4F9TngaE0KAdp0kQaTynG9tPuQ/azeOfR 7kOee9wv7cdhBz6Hb38U0BzYivWtPmQH90W8/z6WmENhI3jWYi3G92BOw1gsAj4EDmibLx22 CmwJ2Kk5Nmw04wTN8Fwv9bzeT7eWYU0/hfGC8Ys5poPVF7bfctgu74fZJ/obFd+sGDNyDb4c 3+T7VGotolS0ZYY8N50NVACLKVGcnQLe0PnpJviYO+U56izJvwRKEV6G9b4N1tyxqs+tWIzH FpBon+hvqyf6XJypznLfN76Q/U54Z50RN1viRn2uWgo8CMyHrSbe0zeqz2U+9D8Qb1rAepQt zmTXUCvjAI22etDoGvv78NWlv76FCoCZvKdop1KSgJlOP8nzWnGOCy72AyQXuqvwHV2l9hnO utewE30lfPBc9M0kdVYsz4bFc2Lo9kjY42oCuoGQ50LXSCC9kPGRgL455BmAPhHybIisx7nS JZ6nHmfTt4U8A/9tPc5Trh/yDJynfqmQZ8OF1uNc/dwG8gycpx4jIM+GGvXA2MoTkLa12BcS Z1I7MccryH0fscclxmtoTw3p5FmX3iNj2AnubwKWSXfKPS+BNnKPiLwN6O8Ccl4V86f43sQ4 FncmPnBdBXzfgDg7DgdRZaFAzb01VbbEufS/RID17dTeltz7+0CHw/JH7odGlgMbYq+A9OXV vceBLOFz17PHBg8KKfcURJqJ1NKBTWvfR/VlOuH7izN7rD9Aojibt9+jdM9q+NLivL0B/CY1 f/ZhKc/Yl2DOF+voFqR7SdzvofriXF7YGPYiQJwfYf3V9/FSQnIdxs+64Bwp0+QdtfHwRVs6 BD4RtvOHSCfurpW5L9llwRIgD7w18DL4+rBwMZBZ88zh/Hk8BeT3FLgveQqCJUAeOHTuy+Dr OWwdDZ6wnw2uBJZK/kJwjeYPAJvtyuAJ5+3gSmCpkxXceZbwA8BmfffjvGk9++Fn7Q+e8G4O rgSWei8Rupph0w6eMD8IrgSWmrlnDT8AbDZtdwSw1Bnmepxfgys9dYLLJP8peL3HCS5whgXf AnbZrYMnrK+Cpc7FqEfD4Ap7W3AnwoMV1HmIkybzLfPUDS5xtgR3hsIXBZerMMpKC+5Sd1DO n9bbiCZ5G7ke797gMu/bwSXeiUKnw0eCy0U4dH/kj5H9H6StkY/vogAjtRylIfX6fsom4E9A aVh4U1hYICuMX1B6fJ+G2d1dA6wC8hAmHRbIAWLM7sG3NP8BWAZ0AKYBRWe5M1cT6jtdpO/C rNRYfZZwAyAGKA67OzMAmCfu0PB9mf8P/Cf3e/+ju8BP/TH0edcQjUi+LMwv/yPMuZB0nr5/ DHXG5uZpFJwZdmOMY8FvIKfoO1sb9F5Bht4jOe994NA+gPDFxVz7P5Pur9Y6IEIfugv2P4Jn 4R/jQub8C5mHL2Qeu5C1I3I+Bx8eGT5jPmwUzK0xHyLM9gfbHPKMLNyeCOdh9kTIfqij7AL4 B9cynBHyvli0vFtYCH93AOpaoe6x2X/We//TKdapQ/XlWWs57fL2guyk7Irqu4jwmxbB134H 9sNdtEDcSwN2O79RewFxD07cj7MnI289skLnF0jn9apzID7nsY5SljiTEtB36hrXuFcXfk6R R8NC9+ME5tM8cedS3IOT7blRnTOgjVd4JtKVnkvoars5Xe2tT5Y4K3Ia03gnDm14jbKdWqjX ZPjvHys/U+y9WNvgy+9Xd8XQn/JOmPUd4gejz+ZhHn8f8T9CzsF6IeygZhQtfU6BCuoAGyja +hY2836JLfZBaiYg75+9hXAcNRF7JPZofS9sL00WfWUdoUv5TAH+6djQ3pK6txYl9l/sDNoM 3BG6jwZY68mucTd4P3UQd+HEHTPZnnK1Zy18YM8YynHuRrv+QqmeVtTEk4Z6JFOafQPqLPb1 O6FuO+Q9vHZyzmgEeYzKnMP6XmALdf8PaId6XGzfiTgD89hizHf3UYG07cLuidoNqaeTTC3Q /7PEfT+gzBlJPgFxr1DeN3SRN5sMOWeW6XuBXcWecPV+svi7DFG+gL6jaMk94HW0XYLvIAo7 8wt557Aap5C+EZ61SrXHvljvWx6loc5aIIvmW+/TfIxjw9MMdVgL/z0JbSimInsC6gVLP4rU /WAhzUcB8XdKY6BLg3wG2EJhf9Tk/hOIt+uR+LumNvL7rHRPCp/cyqS17KvbDwCLjGjEnTav gU/+PY3kv1eCjd5O3DET+35OR/J5czC+U+SdT5/zqzzrixXfYdQO6m73doP2SoqzK2i8vZl8 yOsTZYj7Z4Dor6+crfSVuF/kNegZyDx7lPGePYqeswm+ERnPKjB3fxPnv2j7ePE9o6x59mHq 7eTRAutVikGdSu2uNNluim80mzLs2vjWBtAcqy3el7gfqwHfbL/GQYmd7gYB+xPK8v5C0d7P qJH3TnyTM1FXzEFObWrjeQjyII3x9sf38BrFifvN9j5qETVBfvt9RFoB0T5nOrV2esj7lbHO o5DFFOupjW9qBDURd36td9wD3mSM6Xso25OI+QXpxRj37KNZzl/xnjOoAb7zMjx3ENok1v/W 8i7zpdTa+yMVOvWpyBPAWER66x7gFemXfoj3slG942C6+Fs14XMar+D9i/22cjc1ejs9bh+h TeYRWiUAXgE5V+j/CPAnU9QYqrqYR1PobkSbMISFxX5NaB14Vt532OCkGV+KO+qcVqTBD1YE +hQ4Lv58r0Z550HkT6g+g1SZ0veur+/nD9JxKRr3Kcg6Tpbp7wXELf7WmtfAOXyRehLhtt6+ aoTbZGF21RzYJwcVkOYc9gT6GV9vVXNgMTCS6HQQOIX3QOeW50PVYchuCqfdM1HJf5ewW0ug KlajRwRyNK7RwGirmhyB6xUqyyDnqLs3lT8AP+m/kxDYo59XqMNdNUR4sq7zj5CzIH+GnKdR rv8G40eNrqoNoq/U3oeODwdGQNW1kB8pVKUqVO5QkOU+qFD5OeQwDZ2uagX0H1fnr/yT/puM cGwC7tAYq3Er8q7UmKtxSoP76lqNP2nM1liqUHlaoWqvxg6NIg3dL6H+YIwG2mp00GgXgStq Irx82Q+DNAZrmDUh+7ZQ//1MOMo0zqW/MgI8JrapMVF1uXpeZH45Vs2wMRtRTtWzCpX4uivv V6h6uyYqpwuIPQb4CYcUqLk43z/j/oA+17uQOfL/E/Z1dD/mdz+NptiKWpZvn7n68VpNjaEg q5isZHIDk2Im1zNZweQ6JsuZLGOylMm1TJYwWcxkEZOFTBYwuYbJPCZzmcxhMpvJLCYzmcxg Mp3JNCZFTKYyKWRSwGQKk3wmeUxymeQwmcxkEpOJTCYwGc8km0kWk0wm45iMZTKGyWgmGUxG MUlnksZkJJMRTIYzGcYklclQJkOYpDAZzGQQk2QmSUwGMklkMoBJApP+TPoxuZpJXyZ9mPRm chWTXkyuZNKTyRVMejC5nEl3Jpcx6cakK5NLmXRh0plJJyYdmXRg0p5JOyZtmcQzacPEz6Q1 kzgmPiatmLRkcgmTFkximTRn0oxJUyYXM2nCpDGTRkwaMmnA5CImMUzqM6nHpC6TOkxqM4lm UotJFBMvEw8Th4nNxGJiMjGYkCaGyyTIpIpJJZPTTE4xOcnkdyb/ZvIbk1+Z/MLkZyY/MfmR yQkmPzD5nslxJseYfMfkWybfMDnK5GsmXzH5kskXTD5n8hmTT5l8wuRjJh8x+ReTfzL5kMk/ mHzA5H0m7zF5l8kRJn9n8jcm7zB5m8lhJm8xeZPJG0xeZ3KIyWtMXmVykMkrTF5m8hKTA0z+ yuRFJi8w2c/keSbPMXmWyTNMnmbyFyZPMdnH5Ekme5k8weRxJo8xqWBSziTA5FEme5jsZrKL ySNMdjJ5mMkOJg8xeZDJn5k8wOR+JvcxKWOynck2Jvcy2crkHiZ3M7mLyRYmdzK5g8ntTDYz KWVyG5NNTG5lcguTPzG5mclGJhuYrGdSwmQdk7VMbmKyhsmNTNjsMdjsMdjsMdjsMdjsMdjs MdjsMdjsMdjsMdjsMdjsMdjsMdjsMdjsMdjsMdjsMdjsMdjsMeYzYfvHYPvHYPvHYPvHYPvH YPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvH YPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYPvHYLPHYLPHYLPHYGvHYGvHYGvHYGvHYGvHYGvH YGvHYGvHYGvHGPiYILCaK1r2awWbuaJlY4iVKnRDRcveEMUqdL0SKypa1oG4ToWWK7FMiaVK XFtxyQCIJRWXDIRYrMQiJRaquAUqdI0S85VyXsUliRBzlZijxGyVZJYSM5WYUdEiGWK6EtOU KFJiqhKFFS2SIApUaIoS+UrkKZGrRI4Sk5WYpPJNVKEJSoxXIluJLCUylRinxFglxigxWokM JUYpka5EmhIjlRihxHAlhimRqsTQitghEEOUSKmIHQoxWIlBFbGpEMkVscMgkpQYqESiihug 8iUo0V/l66fE1Ur0VSn7KNFbZb9KiV5KXKlETyWuUIX1UOJyVUp3JS5TopsqrKsSl6p8XZTo rEQnJToq0UGJ9kq0U0W3VSJeldlGCb8SrVXRcUr4VL5WSrRU4hIlWigRq0TziuYjIJop0bSi +UiIi5VoopSNlWiklA2VaKDERSouRon6SllPibpK1FFxtZWIVqKWiotSwquEp6JZGoRT0Swd wlbCUkpThQwlSArDVSIokxhVKlSpxGklTqm4kyr0uxL/VuI3JX6taDoa4peKphkQP6vQT0r8 qMQJFfeDCn2vxHEljqm475T4Vim/UeKoEl8r8ZVK8qUKfaFCn6vQZ0p8qsQnKu5jJT5Syn8p 8U8lPlTiH//HvpeHt1Gd68+Z0b6P9n0ky5Isy7a8yLtjjWPHjvd4kbM6+0IC2WNC9pCEtBRS oKSUsLS0ZTeQWE6ISSikbSjQFkhpoKUtNNzSNkBDA20phVi+35kzcpyFe/t77j+/+zxXyTvv mTOL5/vm2845EjnlLbL3a0K/StmmA72ZsvUBvUHoNOn8JaHXCf2C0ClyymuEXiWdrxD6OaGf EfopOeVlQi+RzhcJ/YTQC4ROEvoxOfNHZO+HhE4Qep4ce47QD0jns4SOEzpG6BlCI+TMo2Tv aUJHCB0mNJyyJoBSKetsoCFChwgdJPQUoScJPUFokNDjKSvEa/QYucujhB4hxx4m9BChBwl9 n9D3CH2X0AOEvkNu9m1yl/sJ3UeO3UvoHkIHCN1NLvgW2buL0DcJ7SfH7iR3+QahO8ix2wnd RujrhPYRupWceQvZ+xqhmwl9ldBXCO1NWRYA3ZSyLATaQ2h3yrIUaBehG1OWJNDOlAWCMdqR spQBbSe0jVy+lVy3hdDmlGUx0CZy+Q2ENhK6ntAAoQ2E1pNbryOXryW0JmVZBLSa3GwVOXMl oesIXUtoBaHl5LprCC0jT7aUXL6E0GJy5iJCCwktIDSf0DxCc4nQ/eTJ5hCaTYSeRW49k/yh GYSmk8ftI38oSe7SS6iHUDehrpSZB5qWMuO/0JkyY/PuSJl3A7WnzPlAbeSUVkItKTPUBaiZ 7E0l1EQ6G1Pm7UBTUuavADWkzDuA6lPmnUCTU8ZGoDpCPKEEodqUEfI7mkT2alLsTKBqQlUp FptGJaGKFNsEVJ5iZwCVpdhZQKXkWJxQSYrNAyomZxalWCxYYYrFvhkjVEAuzyd/IY9QlNws l1CE3CyHUJhQiFAwxWItZRMKkHtmkXv6yc185C4cIS+5zkPITchFyEnIkTL0A9lThrlAtpRh HpCVkIWQmZCJkJFcwJILDKRTT0hHSEtIQ85UkzNVpFNJSEFITkhGzpSSMyWkkyFEE0KEKH5M v5DDSOsXcaP6xdwFaH8B+BzwL+j7DPr+CfgU8A/A36H/b4BP4NjHsH8e8FfAR4Bz0P8XwIdw 7APYfx9wFvBnwJ90y7g/6q7h3gP8AfAfgHeh7wzw7wHvAN6G/d8B/xbwG8BbgF9rr+V+pS3i 3gR+Q3sdd1ob4n4JeB3av9BGuVOA1wCvwvFXoO/n2pXcz6D9U2i/DO2XtCu4F7XLuZ9or+Fe 0C7jTsK1P4b7/QjwQwA/dgK2zwOeA/xAs5Z7VrOOO65Zzx3TbOCeAYwAjkL/04AjcOwwHBuG vhRgCHAIcFC9iXtKvZl7Ur2Ve0K9jRtUb+ceBzwGeBTwCOBhwEPqfO5B4O8DvgfXfBf4AfW1 3Heg/W1o3w+4D9r3wr3ugXsdgHvdDX3fAtwF+CZgP+BOwDfgujvgfrerOrjbVJ3c11XLuH2q h7hbVY9wNzFBbg9Twe1GFdyu5M7kjYM7kzuS25LbB7cl1duQeptrW+u2LdsGt/12G2+UqbYm Nye3DG5ObkpuTN4wuDF5jN5LLaVv4muS1w8OJCUD5oENA8zfB9DgAGoYQIUDiKYGDAO+AUaz IbkuuX5wXZJaN23dznWH1kmqD607s46m1iHVyNiJ4XUubyMwv3Wd1tC4Nrk6uWZwdXLV0pXJ FfCAyyuWJa8ZXJZcWrE4uWRwcXJRxcLkgor5yXkV/cm5g/3JORWzkrMHZyVnVsxITofz+yp6 k8nB3mRPRVeye7Ar2VnRkeyA/vaK1mTbYGuypWJqsnlwarKpojE5BYSn3Aa3z80Y8AN0uOFJ KBeaXOjiXWdc510SynXIdcLFGPVOzklH9A5U3+lAqx07HLc5GL39NTvN2yN5jXrba7bf2/5q k5h4W6SgkbIarD4rY8GyWdt7GwVONBAuKhVkbbcGQo16C9JbOAs9hbMgij3DnmcZy/OG1wy0 Xo/0+jE9zevhdL2O09F4M6ZjeF1ReaNey2lpvBnTMlZeCz34jmHNtN5GvZpT08mEulNN8+pE fSOvzi9spBjkQ4hCBiBGgZ8CWbhG8OthK5IiyOdDvT3RaOuIgupuPaSYNvsQ+uqhYA/e8l2z Dsm+eohKzpo9Ywihr88cQnR97yFza9cssn/Tvn3UZE/rIU/PjEMPeGa2HtoJDR43xqBBeYas 1OSZ0bnrB9ZHoxvmwmbu+g1R4T/soQG8F8Wd+P/6DbCP/w0I+1T0v/yQ04DmrYfPhkznhuj/ 6g/63/34/z98higw0Rl1Y/QeajG9G7ALcCNgJ2AHYDtgG2ArYAtgM2AT4AbARsD1gAHABsB6 wFrAGsBqwCrASsB1gGsBKwDLAdcAlgGWApYAFgMWARYCFgDmA+YB5gL6AXMAswGzADMBMwDT AX2AJKAX0APoBnQBpgE6AR2AdkAboBXQAmgGTAU0ARoBUwANgHrAZEAdgAckALWASYAaQDWg ClAJqACUA8oApYA4oARQDCgCFAJigAJAPiAPEAXkAiKAHEAYEAIEAdmAACAL4Af4ABzAC/AA 3AAXwAlwAOwAG8AKsADMABPACGABBoAeoANoARqAGqACKAEKgBwgA0gBkrox2DIAGoAAFLUY QR9KA0YBFwBfAD4H/AvwGeCfgE8B/wD8HfA3wCeAjwHnAX8FfAQ4R+HvFS9GHwI+ALwPOAv4 M+BPgD8C3gP8AfAfgHcBZwC/B7wDeBvwO8BvAb8BvAX4NeBXgDcBbwBOA34JeB3wC8ApwGuA VwGvAH4O+Bngp4CXAS8BXgT8BPAC4CTgx4AfAX4IOAF4HvAc4AeAZwHHAccAzwBGAEcBTwOO AA4DhgEpwBDgEOAg4CnAk4AnAIOAxwGPAR4FPAJ4GPAQ4EHA9wHfA3wX8ADgO4BvA+4H3Ae4 F3AP4ADgbsC3AHcBvgnYD7gT8A3AHYDbAbcBvg7YB7gVcAvga4CbAV8FfAWwF3ATtbhuJwL/ R+D/CPwfgf8j8H8E/o/A/xH4PwL/R+D/CPwfgf8j8H8E/o/A/xH4PwL/R+D/aB0AYgCCGIAg BiCIAQhiAIIYgCAGIIgBCGIAghiAIAYgiAEIYgCCGIAgBiCIAQhiAIIYgCAGIIgBCGIAghiA IAYgiAEIYgCCGIAgBiCIAQhiAIIYgCAGIIgBCPwfgf8j8H8Evo/A9xH4PgLfR+D7CHwfge8j 8H0Evo/A9/8vE/yPPjP/TwX/o4993lxKSlHp9czr+LvslJyqpNqpDmr2s5QWTNpKVaEjRywN DYp8+XNgrjTlA4NXUAjV83oJrT3qdCYCR0tl+xi2GQbvhxPyfRDKE6PvjL4aG33nnLEydg7F 3n73nXcNH7/KVsZK3j39blEhYv2sALOOlsvNskBWAV0aDpWVlBTX0qXxUCBLRwt98bLyWqak 2Esz5kxPLY33EfP6hVlM56iM3h5I9JVIvU69WSuT0m67Mb8maOiZHawp8MgZuYyRKuQ55ZOz Wq+bkvUbOeuxWD1GhcLosVo8rHz0t1Ld559IdV/US677Yj8jq56TyGbuViloiUw24rU7cqv9 zX16k0GiNhlYq0JuZDU5DXNG91rc+B5ui4Xca7Qd1BIY+1yyXWqmsqgQdf8zVPbY2cMaA2oL jIiN0MjY+cNqaKgzDRhTneeduBU04K1W2GqELZ+Dgvhwnhq1ZwdCwb9r1Bp7lieg0iKrRENp DBr6YOD5wGsBJqAJaIyebmNSmqQSiYSxsjIW6+9nbZUsNNkSw7litgQ0Hu0nrxuq9aDVKhNU Hmb8jI4JZIVCZeWI6NkmDzB+yYACGYIcFzQpJatH/7SCUZkCbk9QjxQoJdE6wl5frlMn2YJ+ j340yerSSRi5Romq0y8rtUqJVOeySlJqnYJhFHr1vtEtFNjUExQlQWBdXipKVVAv8U7ObkDt nEGPN1rY2DWw8YGseB2Ez3FaeDhu4eG4xaLOwyfn4ZPz8Ml5+OQ8fHLeMfwrs7ETR6BNhUpA 08NwJvD5Yb3IWoE/HdYIfHZYjZk28NoH1CfUtNoZ/ntRkTxbmHnpio8g9ZC8l0qcSwh2W4li /e8KSis+HSUN6I5GK0kblGrWSQL+rFApGy8r8YP2LNievQyKF9CBAIuN2XSxKUFcReeitc3p p2yRiA2FNuxfVGyN1uWWzpmSkx51VsxqSZ2s7y5zdASbru169fPqGfUhtH7Ssu7aXAsXluwK c3m9m9sLepsqjKrS7lU0irWVutP9gerO0berZtRw6Qp3eTeFqAVj5yUaqRe8eOGwm6qOilqJ iloB/gvWCvBHWCtRUSvR56CO1FF2FKP8VAjlpUw9kuMolyqlClHBkLIPXPr0OQwUI+Ib3jxZ VBg062QT3FJmEd0UO7DF7KWx3NisJBpaqjDz87Y0b//Zbe09d/1iR8WKWY0uhZSRKNQKXXHn 2s6+fYvLSxfdPrt9fVdcL1fJmKMGu1FnjoRdvQ9+fP93LxycY/HlunQmp9HsNinDsfCUvT/c uuUHO+pCsZCM9YIHYiu7DazMSHHURt6T8CMTthwTthyTGWQ2GUFgkx2kNR3HlkM5iW6com6c osU4RYtxirpxHofaVgm60aR0Xa4RFBqSEivJ6OJ0xiL6cUS7xCTkEwzgtr6Hzj+c/kh4/cFH z97fdSS++vG9B4e2Pr6ukr7n0S8e6iYvevr3zx5YfmRPywW2ducP8c8vQDJmK0iWR10/5AyL bzQsPnVYfOqw+NRh8anDIzTLK5Umn8kHD+8cQQpeuzOEToTQqRAKhWQOPAmp7QoDDcnGrb5/ 7ToQKyaEEYNo/cJ7pq+w9ICfvazJbJWotIrRO7GE9FKFViGVwiYtQykFhAaJEtodNFJoVZIm o8uoINIqjC6z0cUq0iuUBrfJ6DTI00UK1iXIPfY50wtyh6k5Q3KTKLdJlNskym0S5TaJcptA 7iNaD+X1yEG0YZPJIRtBOcNZXQ4cIMWMFDvJVo5Lh64QJpNtMuIyvSCYPA3ak8PDC21eYfY5 7VlmBYjaKPSeNLlBiqlyg8ticrHK0T/KtXKpFDaSp7CUHizR7LGPJDdIfVSC+h7vcbv1dmyh dmyhdhzb7CoNboEUdvz2tNTzYeQL8+H5YSasF+XXi/LrRU/Wi56sF+XX429AxuIobh9BqsNZ WZWx2uNIBTlehSKpyh7zCMobivXh9w3ezBJ1iHHudH//yfFAJ+rlEm8uK2exFWBvF7TF4gh4 0f8lkhskCo1cUzF396xrH78+MWXzY0tqtpSmT7OsRAk54l611agyVs1ZuLjorr98v6//sXO3 t+xaMsWpksw1eUyKUEGo42vPrd56Yk+Dx4M2ZWWDGhUKg9uYNjlDniy7pv+J8/vv+fzQAmcg 4swi9oFmQM61UNOOJmydtoM2hhK1RIlaokQroUQroUQtUcfAp1VjJ45aULvK0C0kTxSLjjty 8KIJkBBmQTMUZr8Dv3GlxW9z+M0KJ8gKL1ijkPwm08LvWD72EXoPniqHmvEMpKd//3E88Dgs avfoAt3K46iYMkHIKRiSirEXjDY6IfPgp5NlyiGhbrr4pO+5G1Z3u8sLstRyKc1AhFU4AgVc VqHPQEQwKVFj+85ZRUo9q9GwDqMVaiG9Uc8WdNUx38by4LdI9CuLgv/VUE/whvm1a2ppbWGh LRZTFdjtzpF/M3hiQ/ZmF2k0KmzrKmzrKmzrKmzrKhyNVVh4yOO8A2siu6xLbbdpY/aiAhmX 08UlM6VNwghFTQnoIZONobIxjLfYykmxkhJc60x4dwGE6xuodFDgEp8WSh1UgoseQWOyqMLM OWx+k4JOlzBqi8ds8ZrVdLoJgZc77D6TPM91ja8w265EG6Vor9rJhRwr9S6T5qIJLPtiv1wl ZySQuqCYPDDe/3ButsaZ47ownXnYm+tQK00eC9EsVIssNYm6aTis15tFZQqsF1kr8HmsTLOo TLOgTK+qoKAYK7PYrscbOLHYoMEtOKUYn2KgvBXdqgJ9WOLAcQ+Hd0F9WHlX6C5WIgZ4oqlQ KBywWi1X0ZeXsZWEQhftTLJda3Fqy53hQMCSvsZX56ZpWmHi7HbOqMhzdnvCnIdFVZ6y4iI7 grBv4hxWn1HRZIbqWe0pDtNnKrdVT72r5cLfxgPl4zlZKluEG30pvmh+f6xzsJN+DmpLyBxg jpDhF42dk5yV+sExwtRW3mnGOjBjgzLj9G7G6d1sJ2oq4ZU+qpDaCdWnV1SuV7RUrxg4vWLg 9IrK9R6HEkhFOSBM6nsCIygquN7ENN9/mf+ND0eELD+h5pGcbbnznf3feOOWhpb97+y/7fS+ KUfCs+9es+bueZHQrG+tW3vP3Bz6rvsvDM2b/vCnDxz4/OC8vof+9tiqH9zS0Xvr8WXrTtzS 3nvbs7iigfz3Ivifm4pQNwxly0RBZKIgMtHlZKLLyURBZNgEbKwHq8eD1eMxaLSozYNrZg/+ EhLFBiE3DMtkGhBTPWzp0kxIjcRADJdmx8DlKVEyobBhXuQ3PnnDnUqT34HDYq4TWXLbl69s ixypnt6f9517O5Y1ZjN3LrhvVU26YNwv4FXLbYk5m6Z3rojrRv+V07SIIhJL1CBxGdVA3cF7 DQVsuQKeuhxLUS5IUY6lKsdvuRze8tEIHilEEixWBbRYUTWsqBpWVA0rqobFX05yFxigGnp6 DY943jYJNHDE32UTg4xQA+HS/4rKv1L0EmHgVMBcoRKrzcuIAwCbyWpF8VA4FMqUfmqZOdvr 9JvVko2W/Nre6vUZZUEpaCqqc7au7wgHJs+p9MXzc8wbdIr0aMM0R6LkjkcbFk3mIMhASFaC ixfFpycCo2+NKxEKCymjrehbXV+3rLPKrIvWdBSl/5DtYW5qW26Ty9Jt/uppEG2axs4xi8Bv mqk/P0PVwYBUD0PMOlFFdaLq6sRYUyeqqm6EzuOjxbzJjNqKechL2cXZxRqXHV/rwgHcZTDg DVziwq/DdYwuwlF82CWktRPDDpHNhJ/Ws6iN0hQcR2GqHIqREK9mfeWonFdrUBuLV8ZUuFXO lrPWGqjcjtS5pJEe6wiKiH4Ir+Aci+vSaLTfcM6ATRW/mfH3gw9c5qCSSxJkfDxhXj5QkTGL 6jd+t79u9fRqmxqSn0JXMm1tS0V/fXZx9/JV13SXVC+/ozc6vb3GJJPQjEwtV8ca+qvKpsWd xT0rVq3oKUHXzv46DOd8WfYgZ/UY5Vk5AW/5tJLyjuqiktretZ1dO/ry9Q7OpGbtJiOMX9wB j6dwcrCso6a4ZFLPWnhHevD1X4HlZ1FLjtp5XAuyWGuHcbHwbzs+TqQsDIix5cuMuOz1iL5d DMXNx4JyXogaTkbHi95xG/ZnwplQ7/5KKNb3ZyoeaInFPLNHKOWFWveLb48b4kIF6zaZyHQI roEeh0i9CWqgKHWA98zPRz7stT7sxT5sOj6c+33YavCvT3iW4qEMo3gT3oClUVZRYKsosFUU 2CoKbBUFth6jDbiKG8ZVHDYhJdxCFeo2dLsu2g2u60TDOB29aCL96IoSjzVfXkpJNk3ZOTJw 7aHtDaTcNynyegaaWwe6ooJq/FBJvXP9Mzsn1256eiMTyKjjwiez9s7Mz5uxazpjm1gZZkF0 uwa0kk2t4j3ZOLDlZCMn5pAT5dhQSIvyHCjPjhwjopMKDRz27Jke3OCNuMthd9hDQa7bLjWS +tVYmWCNiDgClpDq70f9/f3R/mhQKIMkOLmXlU0ofoqtVpmcPirROcIeq9/OauRMeqYCGXOy 3H6jUoLWI7ScUUDo4rK1jMKLp3WQRAoFpSQlTPzAUO6L5yUJ3I8nfrCMk6BmPAMy1lDLhkM1 qHhk7DO+Hjt2EExQgRs5MRQ0CD1BlGXHjUgWsvtwI78I5Rei/GyUH0Dl3bndgUI1M3FyCyqY BLw5+OAJLfFfcLzGYzKty8W8VGDpbonBHfFyUbdOkv6Y/pzROSM+f55bz6QflyE25OOyTXIa BRAyM0pz0Ov2m5UMitDIw8hMAY83YEDSkI7FdQmrY35xIZZpSwZtTqwVnfqLk5IqtR4X0nr1 Fz+RVKugLdU5bVhDheDpn4KGYlQh74nEUKQAhewoZENhK8qhUKQ7oGY93ezFCT0QGb9H+Fyc ukNofOZugrTjIiLmPa3UGMnyZVvUkvSZ9NtSjSXb6w/ppVq0IH1QIzdAgApZVTJkRWapypTl 4cKsRJM+VGt16qUwZFDSzOgolF2MVO+00j10wurSSxg5BAU3ek+hlQvve/QFnLPnQHZJMD+l SiieOsT79JO5ybHJjFppi2vAVePY3+PY1eMGbL/xEfRPHob0YT2FNBSOCFSVmHmqxKq3SvTu qozNV43QCt7M2l6g4oY4XX0ijigY38YL6nJHkIvXn8pCWVkSzwcFLZN+p2mXULHMXIYwvO1f O7c/U8KdjM7trxTnNYohoc+FsQJWKFS1pbKLM1klpWI9J/ZIhFggJ8nCiofBTMLgdjk5XfUd XU3ru/JrNzy6fKu1qKNy0oLmIo0CSla5a3Lf0viCr/aGHtzXsHgyN3Na3epJdo0Gai7NrERj sHFpXdualmBjfFqpyxPwKAwOvcPjDHhMecntvSdt+YlIY8/kBtDuAdDuG9K1VC4eKxyBYKby l4lRsEyMimWivvC+oK+yEfQZ77JEcUEc9eHZPqz/KI7BUYMwCUireCVlUZWV+iXSwhEkfTrU 4mo0tFVCc0jaLkRNUKGtcny8cFFn43EzbLkygBJny5TDctZqFQrEN0oW3d4fbW5sDCuMLgsM AGRyk8/ugNFATuvUqTkLb5me85Ql3sf7avkp4Yat9bUzyh3ozwPH9zSyoarIKoihEgnEUGmF ggxOFaN/jFQEDB27Dw1M2bV4kjF3cnH6QM/0mkVbwL9mgcZ8zMtUKXXzkFuoQMgA/Iw48D57 GA8zrzKN9tGl02djH5BpNVrNa2M6pHP8meNV2qlc9giiD5tamA+LcH5WaqcW5Y0g2ZCyHY/T o+eEzfiUysnxCbTLJkplpPyQTZwmZXy0VO6oaZ0RW3DXktK6tQdmRrsaSu1KGW3U6sM1yaqN O/x8f01lXyKqwYPN77EOVusIeoz8luGBm57fXG1wZtl1JrsxzPlz/Eefmr57RjQ7GlCYPNhP 54Ne7pOupEJUJXULzyWqkdpVib2zEmfjSlzNVWLrqMTGUnkc/YuiqBjRWkxUVkxUVkz02Jio rBg2KJXJ36iuDLskulz8dUV7C7i6ZFjXLm3DBYhgTonLZkwFexofrk90QSinx62KCYUmDq7K mfvkrNuMF2GaDsxedOv0nOKFd8zr3M3LzRy2KeXD9dsaEmBBYFF1/kl8Y9iRMaCN7X3tu4cW bji+p2lKPa3OjDtHp4DtLNzKN+xaArZUX4S11Q/aOgBRLUrFqaf43FhZomx1GWPC3mTy4elH kz8P1755WFtkYUKIb2AL/zrSEH0wSuMp9yPY2+IS0fgkoo0J+2qBSYCTYP35/Xkv7pTcLqFP SNApCZJI3LHfhVrsH8zXrdHROuUHbsHA+ifO0xKnfDtKjE1YnRAcVBbwTzAry6XGR1vCZYJC 5cyBsGM05W1c08Uvbo5p5GoZQzNydVnfWn71I+uqatY+sGjFN+fnP8xs2jhpTm0WDO/D/tYb +gosTotc5zBqTXqN2mE31W4e2bzhmRunNKy/d4Zp1/6CtiXlOM8Fxz6n90pvgEpgccpqwA4o OJ5LjFquTLRyieHMJRqTC/8wozA3ODJ2ijcaYNAQVJ0ra3KGzhVO9bUZpgqjtGI8Ko+eLPmY +FjJyctmKy1EbtnEUVpAnLksycxW0nuhlpHJLd6IKxj36V6GrCc16l9WQGiy+0yKHQYDDjU7 AlNXtgQmZ2ugxtGbbDqpUq20l3RVLZSzTlO278KHuBzCyxiMxZdtcrLy/rlf6Yto9RqTC699 labvZG5mXqJqqQ5qHnWKtxjzm7CXNSlA5CafwYTamkoSUCVhFSRE/wI+8zQ+lJB3QpPX6o2o rdMl0RcyJXI5th6DoK8TvBYa+SVyl0teki/BOubjWMkz8J+Y4TPAZTNyg7waOKgvlDMVLb/R 9Jy1WOZXMO/XTM31TX6romX2W75Ocfo/QSaE3yShP1ryClauDQpKXFKy0Gl4JQr/o5kN1jro 2GolqSAUlkE8s9rEkXDG5sohvcbLhC3xbBgso3hoPJ3iZbJQOKxjxD3mZpP+xoC7uH9nR/ki l9FWV/Zh/Zrugvi1D69deWBhnsFf5CuKFQe57PicG9siTRwysGw6vaS/sClmWzK7aGrM1jOv 631fxK7cc33rkloXsyHAZU+PddzQk+exGgu8gQJaRfsnzayuXZMsCvIz4/7aihKHoy1v0vxQ sH9y++befKXCn/54zjJfRXPOzKVc+dTRuVUJWuHIj+RY6uo9hbXYvg9AHfcAZOZiatPhRBzl XlyAEA17wsqEuFIBadnmVeNwq8YRQ41jh1oIG2p8TEXxeE7Ym+swQEY5mt+S3ehoE8KnMDEx PgNMknHlpdPUQjaRs1fmZFIcWpgHFEaSc+0FzYW1WxtgV5jazKTiptubZ21p8zsy9kzr2+c2 ZM9Ijt6S6ZmYf1ubJy29eQGOlDeNfY66pDHKQvmpW48mAp2B1QHGKtZyl4zYTAKfuWxkR0Zy x+m1lJuyEE1ZxKss4lFLRqUWUNPTKg6vDOOfKBx2GJoF/bx5LipGQzGzXH0O34TTLjZGsEJU e7kCTHnVVVGMcRUwezKz4aiwKjdSCQCJx95I34kWg8TZVCG1d7izGK/VC8UC8Cf4uYOZwI4X 8bEAQfxrzaiGEs+bMP1P5BpfB4DYx6scDqq4AMtYADIO53DNZsikQ1LBS0FStqQkU88SaUFW 6SUTHtZLR7GXiN3l5Rc3+fLtMLxj5Eq5LGDzx7y6TNDDOsiNVlfn6hdv6Y0qVFrWqMVrclJz /tRmZvBKdRA/2Ap+EKe+yWsSZShShIp4I2qH8uiUIFyRmP6KsPQagYX0V3ScDlNZlEbUgUZ0 E42oHI2oEw12Dac1P5/CKiEuYs1SS3Oa3Y1sxj1gmIRiUGxBdS/khOIzGSsYN4MwuopziMND SBVyhKxWZqvClOV0Bex6WXrP5faBehVGR5bdkWVRavXpY2iVVi1MzcGwSIk+SWuvdJMLr6Pr VVolA0lVqbEb0sfSQdYixg5UCzqzULywcrVaWLm6+tLQRRtBnx1WGRoFiUUDuPpK1RWW7bjy 0cSnkJ6CGmca9QHvMuJlR2F1PCSMzsPC0HxNN2q8coWVzBhOWIn9YDy+eb1WPLfuLSbrO8JK j7DII4Q5Fdj30Wl4jmda7ZUL1uS2VyxsH0efQZA1IFmqtQWKbxmvrWupbcyvaM5vc0x4/xOn 6ivFeVu2MrNohqOl8FX1/ypkflkMtYgDbNFYpKdIKDUpzHkNBZXrp2DvsflNcmtefUHlhvHI KjO6bVaPQd52W3PFzIZCQ35Xa1P29OubuYsxNlB5WYy9sofZA4UJwyjVio3JTmesLqeoIdcE wbctk4PgDRZT+3k9eYN4I6aj8//eejkeLHrVuP4nWQnXDiRJCfkJjh8VExNOS7wqvyXXkd2c UT2uGi6uTRou0Xbw31btl6encSV+q/2/SU+XKAoUNB9nJzwafAc0hNeMHuXdiQjKMaIIi+fa QhoUUqCQHOUKsztXWSc6c9V1Ilyse2MqpJqwAOW7dAHqGK3Cc+FH9VT7GnhNDvwbLX1LAEaO 4vAajxBFlcXGl5X6M5//bn2Jeadq/ZPrVj+0qqxy/RPrgcufctWu6Gxe3uB3JVZ0Tl3R4EN/ XPXM3tbJ2w+vA24B3tq8a2FlfN6u9pZdCyrjc3fhuYX0fuYN0A2eW9iJ5xb8ZSrRSlSilagy 0UclSq8SihgLmVYQJhiEFQEyw3DVeYVmQ+eXzitcbVrhKjby5dMK35ib01DHZ08wFrPFZZRH 2tq78hd+DU8rlAjTCo3hhs31tTPLnej965/d3WTIigfStZlYKHkfbIbBs16bcmsjlrY9Bwem 3Li4xhSpL0rf0zOjZvFWYfwM2rpP1NZe3gXq4tRR7DBRlSYzxSIEuSgeO+dSJcRsJnwf7QPx +2iZ76llvo8GY2dLsFk9KcpJDAV47OxsqcBjZ0M7zvlXHztforNSlsx8ZuzFVvrlY2cldjPO LI+0TG0OYxUVL7pjXk7jlKZc/JVGs5uVXzF+Th/OaAq9EqkM6DNjaDZYHVmZUV36H2QQTSZk YBAtRCf6EWFmcNHhNaUopBeN6uJXVUTj0otWp8fGZZywEICtjHKCzQV5ZbQlpLf4mi1tlBju hYQfHa+FJw4A5V9mRDL6EVqmVChsnmyLo7C0KnB5mAnWVVV6tP5sj0bCIGah1csqlUqFuaCt fPTQlYFmd1lDWM8oVCqlTvjGUtfYOfpVkLiZepXXxFoTrZ2tO1oPtkonLLZ9Ki6yCUZRh6en TJctwgmLb+h3PEdW3IS1Nmxi4oIbHiLjmOM6hj4VvjahwmWRhhdKJdgNwf0SmoMaWlPwdrnq Q3YaO59dwzJkYe23eFWtxXqWOOP4kpq4oNaPl0gmLKhdrKX/XxfU6FdL5u7qKJw+pdCqkuAF s2iiryK3odgV5qclu/hwpHtLd/bUqohFzkB1pJIps8qaY7l8xJLDdyd7+DDSTbkO3rfNYc7m TFB/unwuY6AsGIrncFnR2r6a0gXNeRqjxaDRWw2swyC3OqymQKE7XJrjy8qt6cXvwj/2V3ql 5EmqippzOEL9J/tWAh1HdWX/r7Wrq5eq6n2vllrdrX2XrM1qy/Ii2/IiY2MLy0bGshHIli0v EEzACYHDGhi2nJCckECOGXIyEOPYyBASZ8KEkCBmkjg2yZkkZDITEgYmhBAIYLXm/V/VLclo GDuTk8zJadm3/6/qWn6//977773/nlpcadK80pyLSnMuKk2BrDS5spIwoc1nr3y9eGnE/rpv aS2xvkVDbU8Qtqs3o1cTzxqhPW7uAMPsMIQ3F45hdloUvbTKt3hbJnKdUyO7ah/NGWqvkNix 5nyleYkvEXZbeInnLokUKQ5JKFm+dyXjMCIMp3NJEaeNGETWOrBFskq8w09+970kzsd+DWyC uzMxsATkFOGgFOGgFNlrSlEllVKoyYXfPW5IWsykSsykCrR/pLJJOkdpaq4prDGTR2PEV5Fc lT0pmQ/0gGHGTwf7iHzm9FWepeYM9p2z+dbUPB32+6yoRTy+iCr03k+XftFt+Ci+6qU18w8u Et0xkFxNylsEV61b2b7jlq1MUU46J99atWVhyYZ1zP7cGXMXjj0I9KlAvzyBiqdgNSOGbozu TZXEcNToRLHX/J0es3VPm7+01fI5BVNvZJpJQgJYFSpOKTjN46I0nOgowokiHCfdzjhOxLFO z+o4oeOUEx+I4zgJckmqZ2lcB6mNk709CVgxTiKM5IjMRJw83wY3xtM9cTnYIxsKkG5r0ozu AWo5lBv/6U6RQXeyO1ZOc+zzaVAzlgiXr9llJtcfxAzLZCc4ezAdjaYDDi77IseThB1fpNgl cVmOfZ+xuuIhX1QV2Qc5yWoTzz5KNv04i8PKXmzTJBZ8QgY+pMmgzcb8SrJZWMYiE2o3go/x CaD2IvSzE2gJqKcO+GnzSPCrdB5uJm1JFU7GcVLHyRhORnEyglNhnOZwKYtb23BbK26rxO0V WNE9uFcxwwekzViBXRUdnqA4zdOkzdjIQkJOOxf00OsIMTuVVcqocr3CKRnNu1Sp7ynpab2r AleQ7yqI1lRc3qU7Kq6qYBbBWd8KiRD5R4SSA892dk4AJQ16T2+tGpurxp9BaCFPZzYlztiL nIPkM7r8Jzg++w5r96WjsbKAjX2GYR5n7cHSaCwFR9l3eQ68C1+4SLOwP2aY5xhJA7aPaRbm DINPM5IrHvRHyLSIbuf0pDB3SNLk3ukpcrpFSYYZAk91MihJMEN2ULzgzU/6c0eMxUrmqxSk YznMVzW66QSqBcKoJL5P9EYV0RhtVdgP/Hic7Of5sc/UDd7cKS+WCLeWEb+V3NOO8Lxi3CRj WSfuBZkVWa6tKe0he5w9at6FMHauq/O71oR5Df4tL/G6c+UK7Bx7ni7X9J7nQosrFYsWe2Tu pTOc7CkKR0pULGF/9h0LdqX0SLHbyk38C2dVY6FIicZI2XcrHC4bD965iIeyn4GG5W0uB34S P+Jw2TlWsIrZI3iVQPL6ZLczu5loD7ACrwX6JFDfCRSC39pIJD+ES0PYT51nP046mhxMSsJB siS3BnFgHiFcAMd6AlZXj3U5twotN51WsptdbggtEd44a/zUZlcyCZzTkN/FdtGojtctMvVX C7V1QV1lhGslhc1+w6IkotEit8RjzP5RUIv0cEIVsscUlbe5HbiF06zsJo/fwbMWp32yijnt knlYJzT4JRvBqD3DPonKUdsJpMAv8ZKsgiTNsqqG7xukbomRSlRwWo4GljpT1HmBgZPgex3Y ChOgd0wXjyQF00gvnpUeTNOhMOkyZwSLwzJ52hMi/IjvyF6vuDjJLjGcrNpEci67Hx+22CVh sSukiuF4kcPrDSjMFfESDY4Fh1fVHX5fUJm8X1SopVWW/Rnei15GIWR9QvaFkXJqwkjQEkVD 8ppd+WKhvYLDp97C210Bl+qzYu5G2Z8IBhI++c5YQ1Vl4EXRaqHCgF2HQroiCIpO7P2l2Z/j O9j7wHOsRvEjCffTzCqUhC8OHrPGymt4J6qegJfCKnfqF9/+YEqgOvdQ7pAC6ZieBqnzp/VY OiAJdp96M2/XAhod2g02XyLgh6Gxul4RkuVQhV5USdrKyV462BcsVpEj9jZW84Nl0NNT75hj TaHQEeQeZw4+aY0Wg4/uXIo6JzoniNFSN/coZ9VVfWB85x5/cFzpuHEiHq8E5R+sJLPzKRjP LpgdGfmOkPSlk8dJmpLEgrjDUMq/SaZqRkxyV/X89iqCnUuqqxYB6Ayz+/Fe/mqYYQlmeAnc aYz/QiaYT8bqqyv9L4o2qu4k7Lo+qGuCoOnkDTj7Cmvlv448yHJE4VF1dW2Nz3y2GRcU/56z uyOeQFzjBGaAs7uiHjDTOP53dqeFE+0uu3DQ7pTgyW47wvjW7D1MCf8APE96QiGu24wk+mlD hykRtajPG9VEaL0+aLNHc/6V8J18+jXCU+9m7+HQlB/ZkfMYEq2/4UgEGFeb2y5xg3zxOi+H FPVsh6ppKvstRc2eLtajxUVFOvzCG7OP4N/zt6FiVJTxsESBs8R1YKmQs56YfCMMEnjDSJoT wFbVfPkckyqWyrRBCfzbLQNbLuGxIxLQgi4b29Q3Lxxr6avHkhL2+sIKw299Prvx9Jls//ds qswzgoXf/v2Xfrpnz7/++Ac7OEEAZaoQml8DI3oFRhRH9SeQZlhWmmmZk/YYGZlGEwZl6vsZ Iyyvy+f1iblVoElrbGBSSXNx9Wr4lfC8NU2szRXUghE75jdt3ryZY5SwzxNWLcyO/Uxgz09f +v523iIwPKid7+JHzpzGjzwvKVYYncBNZFfB+L6RPcmE+KtQDDmOBb7jDD7HoerXq1/PkTw3 kfG8YU9N+pDTMYVsXk2WNa8NIwEsUqfj4YdJmz0bD4HOcgvlRLMJik/Vw++1C06aC9SfPYmP m29TvhNwPieYb+ONhGzToZh2LWh897is+WxTDnA8ZfHhh412yubT5PfcIXCV4qrPKfDPhnXV pwiiGnIRbZag+YVu0PoDqCUTWd23vqPn5/2NQn+DeMnPo2VqtB/+JRb2Jdb5pgsJ1XpSQFhn Np25ZGCy4HqMXk4U4/lefqguU77rTUPHw8bNnkgewMMhjAhMjxvS+5wuwWIXbyzDAkyXL6oI uCz7ahnDO8M+PzkqpVfYLDeVfsTpcjlvLsWiGvX5w06uDHtT2KJE/b6Ig8fpvU7X5JE09pSx B1S/U8x+NVpE2y+RxZ0u9Otn9iPkWwteEdWLo3gBnOI4URayX5/Zj12a/SpeQWh4JXhWz/A6 akBL0adPoGVgHfmcTO+ly3D5/k68vRMv7MQNnTjRiTvHmYUZty0ctl3TiK9oxMsbcWsjLm/E jfDF8d0IE+EkRqtRE/LrJ+ExqMaGwYF/D/x5ptfWOlVTwyfHMXrCtbF7HHuO8FvylYkgDgOn wD4a+AW1PjWS0kR7dcScmOGqc+e65uI5kbRcPPGZhpHDe9Zcu6mjRNGqVl11eFfJikyFQ+QY LMqSnGzqrR+4aV0pG1zQu752+K6Nycd8Tf1dJcsWdQbjnZs7M5vnR/DD6x78SE962citX9y8 9kufu21Hu+TUZLvT5dCCisWhOlYcenSTM+p3tgzdcmnrlq6E3RfTPvbYcGXNmiGyT94HtH2K jyOSHLwEf/wEaiLupkqSmaBDlELjuHmmMXemIXemIXeGBtvU6aBbD008hinqwTW5a2pyjuzM M3RDqmacCWQC7jTVjmnqJpt9kjqfHmf8mWDUWRyNkroLN/2IuqPWefSaecSV80TAuaE3mifJ jfOeYhYiNHXqKJnk6UnPZ0ab+Uknzd2fkzRNoovY0VbyjK4aeGhXbtBduUF3mYPuIqymWomt aW3s4CsnAxsXTeaZpSVf1HTKcApnpUtDo8yIwxLuQbnC8JmmQrOxFNRP17iyDfnsJV9TEylz ze3fN7FPte85fOW2z+1qTS/ftah9UyZee9mnt2+9c6CCJC8tGV2eeikyb23jyGio5eL2oZGy okU7uju3dMRu/MShG/CKi27oryrru7q3Y/v65UWxRWs2NXVftaG+es2uzvrNF/XoxcvWbWG2 lHXXBLauSy1sb4k1XDf5UNXyBR3x2PyunorBK64klhvw0nO0TqQcvZoJnBPwL8kF/CuJ31dC uKMSzwjlk/0rN4mWuMnkuUm5Mdh+YNYg3QgU6SZz6WZEVzdDJtD+mtg54N3r40xlRrKSEpQM Ymmlt0TypqyrrAyiPj8tgzIY4iSVeGRF1sqK0Di2PuFcS+ozcuUn0zm94COAoM/cZ6FT9iG7 BtyM4C/HPle98ysfu+aR7eU1I185dBDarzhC5e29Neuu6PBGFwwtnbeuAyw95tb73j4yePGj 73z+3ndo++XBBw6saw6svv1rI3/3vUOtiYWbx24E9fUYiO2DvA9Vof/IJBJRnIjgRBgXh3Ai iBMBM6e1lNJeI95fDc1XIeSuwYiQFpWakbdSk6ClZgyq1CRoqelelpKCFkfUT27yy+RTVk05 gpbKlWrK0YzzJ83CDyA93PF5FasubRx3Hi3uK1XGsWgUvdZ1Tk7QuCf5myCpRLkseUMYpn38 AdPTyaXJw1ouGL59c4m5wFFbgH1QsNrFyU2iTRYEyW7BjvdI1hArgMlextk0v+YHC/RVi0Pi u0lkU1SCLi2oSuxL91k5e9Sn+hWb8A2W4zBZft6/U1KDxFIYA2p/Fnh6Pro3Yy9twuVRXBoh 8ZLMeG4ZymAv4WIv1TxenfrlTOXx+hL4h1pMWrc8xVyPZIM4MomOyGS3T53XoustwHxVx+u9 QtVapWUcp3MUMqLE1YYyAQUykS8OpjSicZBZxCGhjXNSaIW87hBpgcFneckpTTY6PE6RtTpt 71883KKFG1c30ARasvYyvMXftvHKts13DFR5l9w0OsHUW5wyv4xUT4hK1OuO+nx2bN1099Vb y8t7W4uK0kUWLepxehWHJ1Hsb9x0zaL5B+98fOy0pFF/cQfohLuBfhswfwL1A8nChGT9uNYC RKklgl9L6VZL6FY7zjRmrCvXJleu9Ltwb4bE5ZJwSZKEizJwNplhHSGLkovE0ztDOk1eM1g2 BJQ/RkMgNOOUyLfDZE2Hye0OMnEumAZHG0lsaMtQx7sNU9Y1WdhYAdrUNtXbNI7ljLVnbcXv dZ3vIYUxcr4wpvr1FiVfGwOqu9rQ96aupwlcZDNca5nW89MlpE0z4vlGEaBpappn5ppED6wA d8/f96UrF+zZ0Oq0CKzDLjWuHe3u2tZdVL72I70HYa5EQXZIe7qGe1LBhjWNrYMr6qzE8ALP wNW6bjTTf/Mllfr8/raFo6sr8djGO7c3eyIxhwO8rURYL9GL5q+ra96QKQLx8LgCTrEos7E5 3dMUK04X886Q1+lTHS6Y56qL9i/pGF7TIjNi42qi+0l2/Q/Bzi0DvfR+ppUEFytxqgInUjiR xCVhnAzhYqqgSvy4xIeTXpz04KQbJxUMU5zgcYLD5SFMtZVmaKtKrx86Xl0x85eMvKWXnyR5 TeGqKmV86mwmAlcoRPwUwhEKCbkrZBFRiNOlPM2oYNlwhq7iYAHIpYFmrCQPlKupToWq6ARz 5XFFscb7rEZFB0hdPbHAjehYubnzQMo3J8z6vJwEnvOHZyc/5kUTT+sqLy7GcfaHbu3uXJXr 5Ks2xQ6+m1XEP+Bd0YpovDaq3K16sl9gspfgR/DueDL7Ri7cjhUBzG5XNOCzs5qFpEda7NLZ bxczv5lsJRI3BBJ3P+8AjfXNjD3VjFNNdLudpRrruKGwmk2t1EysGpmU95ESpjSQPg1n00Qu 0o5VdaN119exdXMXND7F1NMqa3MtPUZzhFzjZPOd5OC5/CA4FRlbRetbOqkT4CvW+GeJzsDr RHSqy7Fy2pSYZwdOGcJjEJdQd86Ca8MEIl6OWRRJPcK4mXDH3r/40JGR9pGLmsAZI1XYorVs yfDShbvXVKXWXLu+Y0My7I9FmA6L08q7tWykuKdm9PBoC/785Q+NtqoBv8OmBjU1pFoCkaDe vWPZ/C2dMVuwhHHGdQmUYCKdvY9nGgdvnZrK+SWMwH4XEcpfBjLwOFA+hs6cQCroLqsaxytU RTELIWcXSP7aXCf/SHlxH93EUMZzdymKEW6ndynmXfRrmeyT7FeI4AjmFkk8N7NxPMOwfYka tB5zRZ6R00efCe3Lx+AeD6+O48qjwTVyvmCNLsl0FsrNPY3c1sb0rgYNB8+MOrKPs7wkZKt4 py8RLEqqjIBfnbzH5eKtDol50+GRBe5ZLRIKON5/0eaUWMHusnPL0gkXrCuCFgZqmp4IUPMF RLw+cnwYVo4a1IWeybhKq3AZj0vp/kRZEietuJuoCp387G5YTuy5lSRyTS1uqe2pHa5ly2tx LSmnlJDDoaPdiDHcAMMd+Crh2DaybsCtbcReoeVd+9twU9vitu1tbKINt40z5RlHdQkuybyp 62LTW2VrgYstR8T1M5xC6g7SkoMB0yOsm8nDlIu5czdxm2cm3ZtlvXmbsYk97K5Zc/DR3eVr FlS4gViyRU539NUP3rahgmm899KRezam6q744tiaj27KpNTHi7ou7VywqS0cmNfftfx25qmL vvzgbZe3yYqmxYLeoIN3as7l1x3eFKtp23772vWfObC4tHfnrV9YfOjxkZrqVdsa27Z2l9Do 4SI0wH6KS6IIsh31OQM8qp4wortgceU2VJpxk9eIL2NYiz7FWZ3y2desNlaUBFb1qaxot01e yxyyOy3sQ4GYHbjgk3wyoYQ1O4Nvl/3VkSLghOw/Zb8ryp5ioq3QZnaci4PM2I5qYUUw32kw Wt7Sw5h4Qk1NXh9JFhznBKtw9reyInGM6JCZGyevh/cxnKTIrNtqZ+arIbfMZveRqJkvXOSx 8bgDNwqytzgSjMCQsnv5FMr94a7ZYDZfOIj8c8/ODf5zsyHcf34QL0fIcvzDIa04f1i95wd5 N0K2w3PDfv+FwXHzNJw/mw3143NDWz0bru3nD/cyhDwjH4S3vYACPhy+By4cflipAv9+fghp sxG+6PwQ6f//jVjD+UFvn0a86sJQ1D6N4t0z8PbcKBlHKPmT/xmpty8MpQkDZesRKl86GxWn zg+VL/zlUPXa+aMG5rDO+kHUlwHe+iAaniiggAIKKKCAudHoBpxEqAns96Z7Z+Dt/zuaF5u4 /wLx0mzMuwKhFljnWq4G/NvfJtqSfz60f9zA/Bf/usiALbngIYS64Pd1g9+9GGzkJV8HwHc9 NkAYoWWfLOBPxXIGcF0BBRRQQAEFFFBAAQUUUEABBRRQQAEFFFBAAQUUUEABBRRQQAEFFFBA AQUUUEABBRRQQAEFFHAhQAzCtEDZjVjSY6JIYKy0Yhn9ef7YJ/O969jrabsOsIEdYV9jX2f/ i/0t+wb7O/ZN9vfsW+wf2IvZ9Vw3QtwieguHVKQhPwqjJCLF1NWolZ7vRovQcnQx9PrRZrQN XY72on3oI/TphwAfA1wDv4HBTqzgII7iNF6N+/EAHsYjeBTvxwfwR/Et+DZ8O74LP4CP4ZP4 m/jb+Dn8Aty56wJ+3SXob/ePwyfhcwRlEI8qUDEqhc8qmIMWmIU21I7mowVoIZ2LJagHLUMr 0Sq0GvWhtegitA5mZwO6BA2gLWgQXQZzNIS2ox0wU8PoCnQlPHUXGkW70Riduf3oKpi9a9C1 6G49MDUFby1GafNtNTPe1kXftpi+rXfW29bPeNvWOd62k75tj/m2A+jq6bex97Lr2VK2jO1g v8ZG2BBn4cSpb03989SpqTNTL0/9auqNqXemziIRWZCMFORCERRnS9gEG0JfQP+AjqMT6B/R b9Cb6C00hTFmsQU7cAC4LoKTOIOX4ZW4j3mTef6XXX82oTpv9vxfr3Cgx/LXbcvfIwKFtuVH W4d+YvZZ5MA2s89BP2j2Beinzb6I2nAT0SacRJ6J95h9jML4R2afget/Z/ZZOD9l9jkUZkJm X4B+s9mH8TBr0aNIh7HUoFr41GH+h4GvxmBe9wK2w7zqwI2jcGY3/RyEM8PQ2wVcpAPvjMA/ HfhlmPLFPriLHA1BOwRXH4DPbXDlQrhvBK7ZCueG4Yphet0gYB99JuGsndCOAVfp9L3km8vh 7Nwj2kGP98OYcldfBu1OOB6EkQ3T91c9qtfV1NbpvcOXjY3uHd2+T184OrZ7dGxw3/Dorip9 wciI3je84/J9e/W+ob1DYweGtlX1rly8YvWC8oWDI8Nbx4Y/7Mhs9OG9+qC+b2xw29DOwbEr 9dHt+r7Lh2a8csfY6P7d5PRlozt3D+4aHtpb9RcheC+ojcVoBYjyAlR+DvnJ1TuAeCOU4B92 5Z/63V9luuni6kxiHbTJt4C3GWir4Suk3pVQQAYwlSR+vO+G5xujW5ztf0ABCxWtp//z2hdI +72fHL3h/fcmb5NeE4/DoZRbxf9bgAEAK6V3Xw0KZW5kc3RyZWFtDWVuZG9iag00NiAwIG9i ag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDIwPj5zdHJlYW0NCmjeamCgJ1BgGAUD CQACDAAo/QChDQplbmRzdHJlYW0NZW5kb2JqDTQ3IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURl Y29kZS9MZW5ndGggMTI3MTYvTGVuZ3RoMSA0MTM1Mj4+c3RyZWFtDQpo3rSbCVxVRf//v2fm nHsR0FDJTDIvXkUUt1zI3EBZFBUFRAVzARXEUsN9qQzXFLN61Cz1cc81rYuV+/6Y5VJZT2rl U1mpabmUaZnCnf9n5px7uSCW/Z/nx4s3M/OdOXNmOzPf78xAGhEFUB5xatyte6Mmf5zZshqS XSBj4NjRjh2TPnqfSHuIyAjOzh08bMWP7TcS2RoTlas8eOiE7I3Pfb2NqF9VpNmYk5U56Kf2 LV4gWpGE5yNzICi/vtr9RPfFIlwrZ9jo8U/nXzyMcA5Rm41DnxqYSVVnv0bU/yDC7wzLHJ/7 4LnKzfE88ifH8MxhWUtvPP0R0ZLxRHxL7sis3P7/EmeIEoOJKjLieoT2MhnkZyw0mqIED5su P04zGPkRu89gjOn+TD9DTETTRoFcZX0psbvDIX1uYSM3aQftS1kYBMtkHN9tVJRvR4uQfSnS zCPfnyR6gkahvfJoBs2hebSXTtMAmgrfQlpOa2g9uWg/HaZT9D/8cU8whlEg30o2qkwkbonL 7jVgm1HBRzIPocq6o1gigsSVUrIr7nkiyL3NVon81bPl2aeQ/qoViVssSoZFpAyz5+G/Tz3x i32p+y332hLF6URdKJV6UE/qRenUjbqCJEqmROpL/SmTBtIgyqJsGkw5NATt9SQNpWE0HGTT U5RLI2gk2nA0jaGx8I+2JGZ4PE2gifSs5T5Nz8A/AX8nKt8keg4tP9nrTvG6xZKpNB1Mw98Z 9DzNpFlw5d+SspKhfJpNL6A/X6SXvP6XypRK/8v0CvgHzUWvz4f/NfT9IlpM/1TSebSAXlWh ZbQS8QtKpJVxxemX0FKkWk4rkHIVRs/aUmllymX4GndjTB2iPRhte+E7QNvhP0Df0Bk6Sz/Q BbqoRWiRWge6RtfpY7R+Nlpdtnmu+jsEfwd7W3wc2tbTspPQYiXbYawVZ7bnFNVOnrhxSPk8 emOKzzP5qp88ecnUnrx820vWSdaoWGbWcJ5XUlzvkk+Z6XzbrGQLLlKSkrGlW9bXv+KuMato NXgdf2U/lA55fOvwhUs20Bu0ET7zb3HY49tEb9JbmAsK6G16l7bQVtrmDb+DUHH8ZiXxpClb voN2qlGwl/ap/v8XHVSyvfBtt2L3WjE7lP8AvY9Z6Cgdow/pPYyd9xVH6SOMj0/oU8xa/6Gv rRF0Uo0gpxZBx+kTPYw+NypoBt9HB1hXGo/wKbYQPUHGWaoQHd+/X98+j/dOT+uR2j0lOalb 18QunTsldOwQHxcb075ddFTbNq1btXysxaORzRs1bFA/PKx2LWfNGlWDKwbdVz7Av5yf3Wbo nGlUP84Zn+FwhWW49DBnx44NZNiZCUGmjyDD5YAovmQalyNDJXOUTBmNlNmlUkabKaO9KbUg R2tq3aC+I87pcH0Y63Rs03onp8E/J9aZ7nBdVv5E5dfDVKA8AqGheMIRVzUn1uHSMhxxrvix OflxGbHIryDAP8YZk+XfoD4V+AfAGwCfK9yZW6CFt9WUh4XHtSzAclRevtbFa8dlDnIlJafF xYaEhqYrGcWovFy2GJdd5eUYIstMsx0F9fflv7AtiAZkRAQOcg7K7JPm4pl4KJ/H5ec/76oY 4arrjHXVnXi2Kqqc5arvjI1zRTiRWecU7ws0l1E7yOnIv0EovPPypZKSTEtiqx10g6RXVtHb TIj3+AllQwlRv9BQWZbZ26JpAAKuvOQ0M+ygASGbKbpRRLqLZciYfZ6Y+3vImDxPjPfxDGeo 7Kq4DOt3bE5VV94AR4P6aH31Wxu/iHe4eFjGgIE50s3MynfGxprtlprmio6FJzrTqmtcQeNG SJ+ZgUoMkc2QnOZq5Mx1BTvbmwkgcMg+GNI9TT1iPeYKjnFB37GecjWKi5XlcsTlZ8SaBZR5 OZPTtlNTcaagmSPk7abUjNJlOVxVYtApYXH5aYOyXTUyQgZhfGY70kJCXdHpaL50Z1pWuuwl Z5Cr7hm8LlS9UT2FupVK7Uksa26v7edIYyE8XfYWBI54/HG2b42IIHSXCsoebd/akaaFkCcZ 3mKlkL4S+SDAa8d0lFFcPhrTMSQ0PdT8+ZMihVhlMmq7/HzyCoLAWybzPXctmplaFqiuIy4r 1qeAJTI1rAJauZVdTibbwnoxnvCT3dnRE8Vr48uFjCEbJZK9WNXhoiRHmjPLme7EGIpOSpN1 k22t+rdzd2fn5N5pqretUZJaImTGtzBDLgpFtCfAYjAG4yNCPN2qwh1U2BvsWCo6wRPtyPdz du6eLzN3WhmSA18QKm0LS8ic3aJSM3ya8ZjdnPGZTkeQIz4/c5vIG5BfEB2dnxuXkdNS5uFM GJTv7J7WOkSVNSXt2ZCJ8lWVqLPWObV9g/qYe9oXOLWZyQXR2szuvdO2B0G5nZmatplpLCaj fXpBLcSlbXcQRSspk1IplAGHDMicUhDwU+lDtkcT5alYXQlUeOA2jZTMzyPTaOA2ZsqCPDIG mW7KopVM/qCTquagiTHdxjkGye55Jj0nPyNdflxUBV2JX82lOduSiznbFmjMFujyd2a1dwU4 20t5lJRHmXKblNsxMLQqGhpHzkn5GU7MUxhQaRSimUORyywd24RITQv9MORyeiiGWh/QO81V LgJzv1G7E9J1kGRA3MGVNzBTloN6pMln7bUTBqZj2HoyRJIEVznkUM7KASni1TNyOOKhgegb dKB6Pg8BV166Kz1CvjRtSLoazkEu6uhsiW438zTC5IsapedXcjZR3yY+Bf/az0unHMpG3dNM SQiCeFm62Uj2QJR8oBNRAzMcaG2dBnbHUDfnUv8QU5KFKVEPy1L4h1iRJKvFaweU93eVa4gM 8Sv9AQ3lJ2nUtqenm4VXoeetBHh3kCsAJQrzaUrrAbQOohJkWfD7PIoqk+6X2SRvoxTneMws stAqJzuiXeVrJ2Ri8jefD4DE2cLzsJ+cIwKsPA6aUruseSDanddO3SbWOieE+vw0qO+Ui4Mc mBSyHQOb0vNLC1yPRzSo71daWl6J8/P9ypf9gNlefuW9LoTKpjTtSP/lt5rdCvAP9iNtka/B dN8TeoXikPYxkb5CHLlXbCFitETvTal6QxpVBqP1S5SmEBQl4RcoDTS13BjQCqSCREtmsolS jEAaXhq9kFIkRjSNZjqlMF3UhlsF7mOgAegKuoBxkIfAXaLPRbo5YhtYrYfjecD74h2SAZab S069H6XZTiHv8DLAu4zWNPIviaEwie0qjdRr4l01KdlIgj8NfpPW0uVLSTcRv8HVvOHztApU sdz5Rk2ad6/o+bTfXoNOl0avIz5BXntBK8tNBDl8r7hQguti6z2yxegjZkt0nRL4GzSkLPQs 6qIYR20kPA/vzaMGlusANUB9EAaiLXkiT6IO+hR68g7GQi5ZQunaJeqgXRIxcB+C2xHUAT1A ChgBeUW4c/QQ6sDaChfI44epg4SdoUTFecv9mWrzE5Ros1G8PqEMsvHOhZTxl+ygBAnyGcAP 4F0HKE5fSRn8B/hN4pQbRcxE/AyueMPplMfTxR9wR4Pn9On0bClGlSFT8Mv0iu1hWlMafkx8 ySfRDFDRcv1BVT5E/OKLXp2SS9GyDJnCVo4aSeBvw1Opi0VbEOUJ2+Opi+0YdTF+MVHP5oIc 0IyS+Kfo53uAjRBtbNNEG789oo3+hqhhmwr/bvhbl6JbKSy5bWwpZpXCknvTjwPl8I4Yn7yn FuelnzUx/EUbew34q1P70vCDYndpII9S1KNE7SRFaSeF5CZIAiFgOEgG/cBMmQaWbhTGb5j2 o2jlga9CO5tEmflQA/aQyu9d7Ta1Y0UUZUu13lVMhHLniGvKDaGupWh8h6w1+hfYpsFfXdw0 oWS2h6JMxI9A8OpUzkRcA794wsZqE72FiNB+EdXYmzSCHQRvUibbRfX08zRCH3NvGJVphL0z jbB9cW+gnLkgyXIlsp+eBNlgiI88l/+DnjG20Uul4ePEcT6f7gea5UqCeV0yLEi5I2kEz6TJ fDz1Zp/TBnaClrF2tEb5V9A6bb+4Af9a9iUt0wbQSm2YuMhepeVaP1qud6Hl7DQ4ibSnaCzY oP2McGOaqn1POxG3n02nf/Gr9BF7hvqxGfQSa0HPslQiNgbMl6t2kR9R4QXW806ZKmN/oGSF y8DgUrIlYIgmEIZewFeCdUqeBTJ4LeR3A7J4MFjJl4NJvA7CCeAJbx7P8kCE7wMVlWwjWM/+ gedfA8uV7CL4jkHHYAfAu0i7H3wLnUNpH4Up4BHtMPSQk+AjE9QlUcLGCPn8N+w5cQvuJe13 8QN7xKuvvCp1EN4d6+s0rGNKh3C/J9c0U19wb4G+MNLUF9w7pI6g9IBXxDHPeo82JnMNFzb1 DNZu/oa4bq3Du/l592y4qbZgvBPrqY1oL9b1QCPJfcNaEyfItZDdlmuM+Nhcy9yfqLlVrVvu w3oBZZjrlns31qZUtR59K7Z71h3+PAWYa4lopY9HWK4hj4ubal2YSlP5VPcquEEGWkrO60Ya LUaelfQCkYo1IFnxGMZ5S/E7xvV4vTHSraZGEvYBNcO8G6UYT9F6OxrKmlAWayK+AhNZE/dV OafwdzBXdcU7X8WawqCncWrqnROGkqFXEv/Gs53R/0n8QbRTDxpjMQSUM1phvo+kTqj3WGM9 vq251FPCZqm+9OfXVV9HMoOuMUN7FNhYLVGAMfieJsRl1Z+JlK76Mxd9IBmLPqojhvjojqm2 HMw9R4hD70nxYOmDXaWu59W3vhdv2m6BU6beaOfFepz+h9nPUlf16F56C6zhkq10wJhv9rXx EPTbG2Ak7bFdo1T7w/D/RCtsVaHXRoMB9LCeSbn2cshrhLgNPXe5fo1WQGckNTauYP2TelIw +lNSB+MhT4zz0YfqG+PFT3Ar6LMQZ2HpOD2k/sI/wHgAehOxXo2XsZZOshg8oXSNDkrv8ugR S6Dr4cvUG0GH9DfHi/4iddKHoG9u0SKbkzrZ4hDuTxONqSjbBXAWetjPNMDWCHlhTkDcZH0g TUF/kE3De5vgnXIdj0GcHFsnkFcCdDiAeU+uQcl6czXvtvddw22dxA3o2dyac+Ua2c1aA3PV mrYF6xnQ7xe78J5dxhCy6Y9iHQu31qoaoJ5ax7LlOqR0DKwxcp2zRUJXUnMz1p5PMd5W4Z2Y u/UO1vy+jzJlGlsmbJFO1MtIpSy+k7L5bKxTc6CbH8SYPyrO6Z0pUa7Neh0azIejbhYYq6sl bDHm48VY/xbTMP4u3QI1QRT/mr5jGbQY9OSD6CusBY0xjl+RY5rVomEY552M6ZSA8X0JPAcE mIs+ugimgELwinwGut9rbAs9AyaABWCe/iD0wAdh9zxIC8FMXk2MYN+IRfwtusALNT9emY6x b+gAG0UdQTYvxJpUSNXsbWk12OFxeaHoB/lZlGcd2M6G0Rg2TJxmoymCjRbvsWmUzaaJsyya hrNorO2dIO+E8DCaiXRXkK4t0n2OdBOQ7nfk9Rv4D8gCcbqL9uptaDn8k8E87SD9zpvT7wbW JANrk/13gHXD3lq5wbZNdFgC+/Oy8TqdNDbSbNSXUM6r+tvUGfL6yKcK3BqYs4LhP4q436W9 Cn822qIF/J34r1SLL6OH+B7otMtQ92UY14E01K8B5g20g+0MxmxFIfT59Dg7Sv047AJ+SXyt 98AcfUp8oUfSJL4Z30Ekxlck5rcKmBsrUH/g0CuI6+BDcBlhaSuPAw0R/gPfQH82h9L5ZIyj UVSJb8T8kYNxuJX6qrlRjo9dFI7yxIEeIAiEgGDLTQLTgBPURPmeQPnmmOWj8lif7uOnyM8q 3wSrfE3x/sTi8sFmrUBVQXWrfGvM8lFdHkrbtZsYGy6axjbRZOgSU9kamo6x8gHW5d3sW+gp 34Af6T2477Hj9I62iz4GT+FZDc8GM5c4xjaJw+y0OMrWiA+RLgjPGuxbrL3fgB+pPGTl2XFR iOce0HaJrWwJ7K4b1JiliPMsAWtLJ4yZePENSyYduksg6yXOsUSMpyUYIzdoM0uhHJaAtuwE /SkeumEyzUC6F1kvGswSKZcVuM/xysJt9AdDwAOW21AUGd3BYeqnGEyJxlawEnxIA41nsQ6t BPXEZ9DnMv26UqYxmQbaP0SfFSr6g6agNUgAnUAH0AvUBNyHrsZFqq8b1NH2b5qJvk9il8UI yHtKfUPqAXLNtGXRCj1V7NWr0FB8c4vAAnBYUYHeslfQWnpc/66Yg1vQMtiW4Vo+dJ0vMadm /7do3f7O/o3EZ8/FwS+IQnARXDOh1lhT7wc1/nTPY9pd8OxNHKIlZWHtRdSQbrF9KXaCuWAb OGXJfgKXLX6SMp/1pTH/VJwG68AX4KiUY30JA37FNg10wRCx1XJ/VLKpd5CgXI99sNNLuuXG S9dab05LV88WB9H2Lf7G3omJZ68jT/wMtoGNYA/YBXlFrP3lQGWf/YVYEAkSgLn2n74L1p6A UZ5mlGKwdM19AKyXcO9p3O3HuvI1PcZGUCh4QtqzyCfVYoo+A2UzGYq+fBo2Xh2saY9KO9bX Rve1w2Fb1gChEtvYYmBvdGc/0A7o0Ud5Z6xT6xTbeCyd4I/TAW0N/Us7Si3ZGdhGj9MH+jDa xcfQTnAUdtZ+y92H9XgU5pAd0Lf2cidd1ePoHGzjLNiuX8IGmQld9DeJns3GW5SX8P1aEGjI AzUn6AwYqCdtDRCuCS0ANAVhIJbo9nUJ20DVLF4DR2C7POAjM3kOtuBzFMpruS+wf8AuyNba sQ3idbCK13WfAOd5oPsUDxTf80Vw67h/wpqXAdrxRdB/1d6t4Cj3RE/5wccWERK8tyLyewfz dATc1WyDVlnCF2ldwCQi9z8tWlm0lKB8L4A9eFdH9PlR+BOQ3g+E8UWF5/iiovIowy2UIUKH jqZr9LssDfKOBiPx3pvaR1og7MAzaC8/PB8LZkr4L5Rnxftbdl045Em8gGqZ7aXZ7H3EFnsf +sreR3PC3QEOQrbCdpz+bTuuGQgXgO9BtPYN7QH/0X6gE+BXukmHwFlmpy/A76wc+rgc3reE joEfITsOrkB2FFzk5egY+FHrT0fBRS0F+aTQr9q/6BtQpO2lucAFPf1bXkcrB/cTAAtRhPLd WhO9GsZtNazHVcQ1zPX3wR9kAv2kGgWjfX5F+wTBvQ23qtZfrEWdL6D+lWVb6IewbkgbR9oO DYVb7ZULioI91xP2SDDm3XD9GOa1IxTDN4k2at87n8ayJKyHsXhvOCXZ3qAFRjjiMP9CXx8F 3b4n7J2usGMekHYr7I2e0p7B2jRIzsFqrpV7vEegIx1B356iML8tlOZXjdJsD1Ga0YHS7O/C PqoEGwbrAuyolmpuL2uf2Wf/37svH15sV8l3ePKWcfZwzOGfkb+0s0uvO3jPOeazt+6x2zzv knmp/f5KyAP6DupwzvN86XUIdWyOuPFo0168L2yE8yIFc/QXem9xG3nVl/Y+1rUm0j5EueS7 wvFMQ1UmeYahwNrje25xCfO76e4uXivFQNDA95zCcy5hIuaAz5juriLr5jlz0MPFMuvcIZr3 Fd1BgrRLPRSfN4gb4Erp+lnnCSk+ZwnJeppYU3yW4IO5b7FKtcF50dyoKX4Cb4OzPucFub5n BtLW9Z4VFJ8LxKG8UfyAqK83pYF4Z1sjGO/ujzX4O6ylY6kK2sAOfTfZ2mdrA31d7Qurtbsx 5nO5h+uEXt1I/MFXQadoB938HbFF7UVI27g67InqVF3tEQLMC6lqb20d+fNMtHsO2eyD8L59 sPfsyg6U+6S91BpenYb67ucpm+9TjAOfvWrvvuwqetCjD/BdYp+0PWW+VnyU5xmPboF37JB2 qucZz96n9z3IA24rfY0am/VkmT3Pl95PxTiszPrju1xPbdgsesiWjbLJOqWKMah7M1Xf+bQY +ss2z16vud8qBGzjAD6SDsEuCGRCXNN+RbguBeivUr60S9F++7xtX10M8ra9qTuNtNwRxTqT QBlFBc/+ulzXfdrAAt9RddjnJ4uKTDAGvHvPYgDa5gZYop10dwaNlS2eWnrvWQwBA+7YW7b2 k6195BvgOtvjvlS8l1wMxkOqOS7cZ8BJWSYg855QvIcrTvnu46q9W8/+bV3otGq/1n0DzzzB 3hRrVBqpu8lxJPem21FrxC1HXJjeEWP3SxCLZw6oMw2NXYFO/CDGfSu0ayL0VYxZtV/yBlXA tzJEnW+9CflNegy628N6FjXg+dSOJ4km8tyKX6YUzNtPQp9j/DDF2/pBP5sgWksdztgJfc0f z5rnQg+r/b4BcNOxThSY5z18LfQ1eU7zJNn4PGoJqtg/py5+0zEH9lb2TpptLcXbc/BdQbfU LglTPyzrnMjSP9XZnXWuhjI18+iZ/Elx2f4R8u6BOQ9xthjomsNhh8v9yVK6K97zhdyj8j5r nXN534Xyqn2qBdSR74ZNuhB1sJ4vfXYGXTQIcelYu3ZBt4vk6SKLyz18XRQhr4f5ZXECuvHj ci8Ma518Vy08U0fa1axQ3MQ3YeetyY5vYpjcj5HvkXtuJiKzxHlkFuZ00/3IRw/vyPPcRfB3 8p4/es4bFWI6eFq75Gayzp6zRH5YDDbPE8UXIAQ8IPfnPBSfI4q1YP4d9T5g7d0VnxE+wn8Q E4vPCH1Q54PqjJB4uvtXfbpYAgaAF33OAR/0PQtU53+eM8Di875qqMsLyItUmkmUI9sL9ajC zrgXWuV5RNZb1VH2mxzrSZh3tqIt2pRx/lYGd5y9lcG9nP/c07nPNAr124N57A3YEVPh361s C4+N4bU19G4Wrb3IuBqwPe4Jb/pxoBzV8IsplsF29Oaln4XN7G+CtbWGz/tKvPfvloGfgG5i zu3RQM5PNr7Ymu+bYT1xSXsY618hNVd7/3LfNRqEUVdrTTHPKdOpG19C4/lxesKaR9WcbZ1J 3pRnA3LOZz8IoGzp+rDv5Pw+xkLOwYZac7rAX4O6Gn1BNxBJnTCnf+nD75jr67MXkd+L9BTm 6nC+EeWsLr5CmR41oUiWL1pirg8AnZSdPxblTKDnML+fM7aJy7C5z/FkGqXWWcL8jPUX/CF1 PLADVEN9A5UueAJ5hGDtRz3lXjLyzsK6dQHzeJxao+djzOMZWy+swx9Rsr0h2u8ydI+PaYQx EVwXck4frg/BuncV38BVzIHVqb+EnxTbjfvELKVbVKKaar1tRu3wrsfwnbaXbY42PM/qCBfq 2ob9TMFqT7sFtVW6APoMekCKvo66Q98rj7HbHDpOEOLSVfw6vPMI1oEj9DjyG6Q/RhMxXzHj fWoAneEzyF+yVaA5vJu4yhuhHeQe/HHo7CcwHlA2uVcu8zAa0QtyT13a1LA70pVd/QOt87Gr Z92DXb1X2dSbaaW0r5VtbdnVyqbeSC+Dz6TLr9Mb7By9C15n2+htsIKNozXgBchWaAPpCfYq rdR7QnaalrLz9BbrSpPgblX+c/S09j3KeJEOIH460u1j0+kD1oniMX7yWDztYlOxdmfRTtaf IrWB4kftN3ER6SsgXQjG2adIU56dgz6QRXboWzNt3TC2l2GeXAZd6jNhs60g0ucS05e683l1 90123X2TT4We8bFg0BUa8IPiNa7TZrj/tqXTCPTjLdZE3MJ4fBltYlfIMd8eY6gB7K+O6O+r 1FZzi+O2Z/EdxKvvyIayXOMTocMEikelbsL3Qx9pjXH7DMbZLutblbqY+kbFZ3IfS+lY6eIU ayom6ROh1zTFmnKOtqCNXldsJpdsS3mmrO2nB9S5MtpKm0uDtQ20C+27QvnPUVMNuqT2NGzG WrRRnjODfey8+APtvA71Wynbm0fC9m5Mw7Vh4ju0+wLkNRJ99jLiPgFfoU27skdpPJsP1oCR 0OXP0xF5lg2Wy7Ns7WdaCnoyDmbT6+qsegbN0g7Sat6MVvuce7xg7QFUYAvpFvjes9eqd8Y3 2pl+YsnaOHWOLc+3kzEu67i/ZKnu26wneAxlBchjBJD7ClNK8TjboAWwTNqr9UP5GtNU9gzG vHxPEC0ojd6rJJDFwL0bjUqD9NKtXRrIq8G9A8jbwy2L0uW4W7r2f1KOsuRhcO/gvy3Hn+Tr hHsHf1K+znDL4l7Lcbd2rgX3Dv6kHF3hlkWJcmB8DZDAjritL9L85dkdwomgOchT/IOmsVTY X/vV9z6EL3KfwPe31doT9KJHixlgKWfQi+vQJrCa16I+iNtgr0RfgTXsc3GNrQAnwTNiBfxn tC+0ChbhEjZLa2ExTkJU9E8Jr6tVLUEtrYKirtbCorHCI7+uBZSgFt1QyHsegUSa0CpJ7si3 rtYEPOJ1r9Mq0MdyE6BD1GPPUT21d6Hug1p7XXBhNy3Xe7o/gBvNN1Ey0qzV+1KkMR/r4kp6 TqWriXlS3mUYQz35GNjO7WDrn6LGWC/jse6G6ZVgO5v3zWymKz5Wdw/GY76W6+hCcVXfBf9K 9EcCJZn6j4iQechzc+ueYgXThY6cQak8w63xDOi70gZ4kXrz76Cf/Yb1/xbm69NKX4+z9rBG gj4+Zylzwei/OG+56zO21l5Ggj4+4blgtPTzC+Kc7hLZYAT8Au4MMAv+t8BlvVBcMA6LbOM9 McLIEJugAzLjoJgMZiK8EfEbwCVrj+oC5Jkgt6y0tgJKsRWIC/YJIhPk2u8XmyBj8E8GMxHe yHTxAzsmskAuy5Fh2MrHxHQwE+E3EL8BXAKxYLzRWly26eJ5MAL9bYe7FsyC/LiMQ38zfl5s MiqJV8B6/U2xE+HeYD3GSU15b9VIQh6VkUdF5PGO2GwkIZ/KyKci8nlHFCD+BLhu3s3587S2 3yjQ9hvs3e3ieftWMcLeW2yGzI7wWoRnIVzgvVfzf4jnjs7d8N7b+WsiQI2/g3kH6M9wX5X6 D/xdi2WiKkBY9C3jLmFJ5H0hSfE9of8vPPeI/i/422d394iR+9cU7z+UTck9iP8e4+xfY947 +jNEELheSv4IZN1B7l/dk/buecg9CTnn/u/dypjDL8ENgyvMO3L/O2x1/5p7mfO987Bnzu4v 5+iS8/A9zWNzsE5kicNgJOgDjljMBaOV/xDm80OYz+eJbPtLmOvqYo4/hPn8RcznL2I+ryc2 2qtRoL0a5sOvMB+eRppJYjNkdoTXIjwL4QKP/uHRO/gizV5Cz/DoF756BXQJ+RyvgzSBWiN5 Bgr7IBYkghijJiXp0bB9a6r7fvWwzifbXjfv9+nz5RmHdd5RSCvk2YNRAHs9EjrDg/SUurtn nnXIuwR99VxxxHiHluqzaI+8rweSjbdpsESexch7g/LcxKgg3kR+yQqks9vh+pxr8QsIH4Oe ADx3DeVZlPe+oe+5jLz/57k3KBlJA1GPJHk/kOdivUWZ1NlKTWpvawda0tew6b+2nRVv2kNQ FnmGFow6HEFbyHLJPe0vaLjaIz8hrvBlFOW5Qwe9qo33vlws9dL7Yd7/HLb+L7BJO2DOgB5k G0et+RLYyUvoMb5ZvA95G36OMuVdONBGX0vREpXnxwiHil1yj0Rvq+6cZxpDYDvLc6vqqIt1 hgL7NNK8a0H1zLLAvjXPP3LV3WrPPT3AZ4vr8rxD3ZeWe/D74CZQDXn3DvX5N8p0WN3Rk3k3 RP0X0xK+h5bYqoldto4oh9yzmYzvWK59ESjbLMwVcr/9gLo/+Sg/Rh0Nl3lfkn+l7kXGqbuR YSjz65jnvqUOts7qfy96Kd1O7pma//vwJL8ovtQ/puryDqREL4f0h7BuAjmPqXuYyE/vBf1j LPJcqHS/Rbbaxfvfcu8c726vt6L6EuvuJlf73Z77m567mVLPPEsPoy/qgUgQhvxi5T1Qde8y WFzk16w92vMUZoylmhgPU/hgmmLsF+ttgWr//Em9G+owjJroo1EuIvIj8960dNlbQP7/Vg/I kuDuAgvVv39ZP+I/oLZegSQRoLK8Dyhtcp5GMz22OtpuNeq8E3HX2Sgqr1+h6Z7/5YKOruO5 ALnvZ4RTuD2RUm3NKdVeg8KNG9RDD6cW8jv0W0fh0Nnf1KdQrL6ZJqoz101UV+ZhC6WhYLgx ns4bS+g8bP8Qu0a74LbRU7RTegq+VxK/QY3cbeLxi9/s5Wih3ofWy+8Z31iKflz8YAygOfww ZaBMw/RGNEivKnZAb2+mB4gzmENyeJg4DRtmHVgmYanaUxapig3URaKfoVH26+Rv/46C7a8R tw+lkfhGk40AzKlr4X5Auj0KetoRsVPe+5Z3g/0izW9fppXI+hnZ9IxB+C6bioPGW3DzxAFb AL7VAWKPvAuNbyfTHmfqRbb21FWmV9/resow9qCfoW8a38C9LE7ZemDc5Ynv5R1vXkSv2H9B mhDUdR1AerTpEP6+skuP672ph9nH7mT5P3ywOYO199H/A2ilvD/nv5z+o5+guewETZXAvxlu rpT/FbAnnRhAy+D+arryfwUwly/SOmCOr2qRqmSWn/Wks9Y60Efel5BtbCSx8pj3n7DSdkCa F5FVTZBgEYW4HuCBu7v0LngFaceDSahhC1DRW554LQLyWrC/V/P7NJJhxSLtYd4RrmQl/ICN ocu8v9YZ6ceAp0Gk5fewWAI7ZAJYAFtkGeyQRmABxnlb0PNuut7d9C1rDlLcTZ9AOz8i21zL L5oMN52o8H4AS/z2FbihxeHCKqAGaAPwqReiDQsrgk4gALQC8s69DN80cc8Ch0Aw6ArZ94iv C+C6HXB3gt9BN/ASZIPAcvAkWIv0X5m4HwZDkMZhyb62+BLMMO8n3V5g/s9HEWakQvRX4VjI 8P7bzwDkXYh+vN0BzAGvg9ngNOQr8AzyLkQfFJ4F6Bs32sXdBYwCqxE/Dew2n1HvREWL8sAe gLyKTsj/SQFbkOYDuH/guTQg65QBMDsWvQqOI+4a3AYmhYMR9zhA2Yt6ApStUMj/hYEM8e4s olvNkWcfMB8kmnW61QzuRnDGikPet6KQvhzoCEJAL5APDoIKZvu7g0BnK++hANOLO8bsC3c/ 8/1FH8LfHqDd3MjbvQjUsOLRV26Upwiyos+BrNdJgDYrxKpQeAplOWSNHeRTeAP+c3DLW/9v M9EaNyPwjBwT6A93ntUOHoZZPGrxrEnhcJOity1OW7xu8Z7FOQuPPKsUL5uoe/ZyrCWZFK0B P4K94IqZtxtLXtFZs90K5f8BvW2570DewQL1KuprosaLZIBJURsJvuH8/8e+fQc3ceVxAH+7 kiVZXVazLdsrQyCAcKWJLmwjirGNjZdiwGDcwcZGliAUAyEhRy4hlfTeQ5RiHpA4pJFeCCGV JCQQ0qsT0nMQ8P2krzNzd3OTuT/u5u4ya/ju573f/t7uk8ZrzcAY/9aDxP6/S/VU74K/+329 vt8FpJ+Bu/6bUXeyqfS5287qmXNHoqpbXMMzJkjd4mpwBs8wEKvASp4xhoiAMFo6eMZYIsQz xhErQDto4xnjieWgFQtawDKePolYCpp5egHRxNMLiUbQAOpBHajFgiVYUAMW49wiUM3TJhML wQIwH1SBeWAumANmAxlUggpQDmaCMlDK04qIEsxmgGIwHUwDU8EUEASTQRH3TCMKuWc6UQAm gQD3FBMTwQTumUGMB+PAWDAGzAKjcU0/GIWLjQQjwHBccxjIx7o8kAtyQDbIwsWGYrkP64bg 3GAwCJyOzoFgABacBvpjXT90ZgIvkEAGSOeppUQa8PDUMiIVpIBknHMDF4pO4AB2nEsCNhSt mFmAGUUTMAID0INEnjKT0PGUckILNCABqNGiwkwEAmBxhF5wCpyMLxB+xewEOA7+An4BP4Of ePIs4kfwA0+uJL4H34FvwTG0fAO+RrEHfAW+BF+g5XPwGfgU5z4BH4OPwIdo+QC8j+JR8B44 Ag5z92ziXfAOd88hDoG3UXwLvIniQfAGeB28hpZXMXsFs5fBARRfAvvBi2AfeAGdz4PnUHwW PAOeBk9xF/1cEp7kronEE+Bx7ppP7AWPgUfBI+Bh8BDYg3UPgm4UHwD3g91gF9gJONiBdV3Y y32Y3QvuQcvdIAruAtvBnVh3BxbcjuJt4FZwC7gZ3ARuBDeA67lzCXEduJY7a4lruLOOuJo7 64mruLOBuBJcAS4Hl4Ft4FJwCXfWEBfjmhfhmhfimheArbj0+VhwHvgzOs9FyxbulIk/4WLn 4GKbwdnoPAtX2YTlZ4KNYANYDzrBOrAWrOFO+pksrMYdzsClV4GVuEMEewmDDtwvhOUrQDto A8tBK2gBy/BSluJ+zaCJO0cSjaCBOzYR9dwR+96t444NRC13xNYtQbGGOwLEYhQXoVjNHeuJ hdxxFrGAOzYT87mdPoSFKm7PIOaBudyuJ+aA2dxOH/OCzO30+S5UglmggtvpY14o53b6YBdm gjKeFNt1KU8KEiVgBorFYDqK08BUMIUn0eemEETLZBSLQCG3TSEKuC32UE7itrlEgNvmERO5 rYqYAMZzW+y7dRwYC8aA0dzmI/zcNpQYxW2jiZFgBLfFbjQcNxoG8rkt9g7mgVxui72ROSAb e8kCQ7ElH7Y0BAzGlgaB07GJgWAAOA30x4J+6MzElrzYhIT7ZYB0dKYBD5anghSQjE43cGGD TuDAPu24URKwYZ0VWIAZmNBixMzArQsJPbdWE4ncuojQAS3QgAR0qtGpQlEEAmCBXrKX+k6R Jym/Uk5QjlPtL7TwFxr/TPmJ8iPlB8sS6XvKd5Za6VtLnXSM8g3la0oP1b+ifEnnvqD555TP KJ9SPqH6x5SPaPwh+QHlfeo7SvP3KEcohynvUt6hHDI3Sm+bm6S3KG9SDlLeoNrr5GuUVymv 0Pxl8gDlJcp+youUfZQXKM9TnjMtk541tUjPmIZIT5NPmYZKT1LtCRo/bmqVAr17TUulx0zN 0qOmJukROvOwKU96iLKH8qBxhdRtDEkPGDuk+41haTdlF2UnzTm5g3q6KPdR7qXcQ7mbEqXc RdluWC/daVgj3WFYLd1O3mZYJ91q6JRuofrNlJsoN1JuoFxPuY5yLeUaytWGLOkqypX6O6Qr 9LdJl5OXUbZRLqVcom+SLtZvki7SXyNdqL9OukB/g7SV6udTNqsGSGer/NJZgl/aJG+Uz4xu lDfInfL6aKds6BQMnZ7O4s61ndHOdzoDSRr9OnmNvDa6Rl4tr5LPiK6S94jnsgZxS2CcvDIa kdURRyQcUf0QEaIRoSgi5EYEkUWsEW9EZQzLIbkjGpJZaGZoY6grpB7bFToaEllI0Hf37t0Z 8mQEycC6kMkaXCG3ye3RNnl5Q6u8lDbY7G+Um6KNcoO/Tq6P1sm1/iVyjX+xvMi/UK6OLpQX +Kvk+dEqeZ5/rjyH+mf7K2U5WinP8pfLFdFyucxfKpdSvcRfLM+IFsvT/VPladGp8hR/UJ5M L56lWdO8aSprbAOlabQT5hEKcj0Bz1HPMY+aebo8ez2qJEuqlCoOtqQIhWUpQlvKhpQLU1SW 5APJYiB58NCgxX3A/Z77G7faHnAPzg4yl9XldamcsdfmKqkMxp1YBPNGxF9riav/wKDFKVic klOcLDkFZjtqO2ZTOR+zHrCKFotgsfRaxICF2i1mySzGDr1mVcCcNypoMUkmMXboNalcARNV Ylc83TizMmgxSAZRnmgoM4gBw8TCYMCQlRtkKsErCEywEipdbBeCUwrSc73TJSQI9Hm+o3KW z1fcre2tKO7SzZzfJWzpGjArdgyUV3VptnQxuWr+3B2CcMG8HYJYWNnlKC6vwnzz1q2sIL24 K33W3K4b0+cVd22kQSA26KUBS9/hYgXzfNUdkQ6fL1xNh+qOsC/+l2ZCJDbzxYqxvx1hmsf+ ROJz5vvdL7QRizroK/xbMez7Y34Jf9DX9e/6Sl5UzRhLiP2LjupQgpmpmJaNZTKbzcp2Z7my XLpxk/RCD5vGtEIdE5lXOJ/pmCDUBZLU4oBRGlW5x2RrLxfKi7RiJZt4+MjhhUcO7yf3CzmH ew72WE8e7EkaPTonJy9XsGXa4nGYRa1Wo+nfL1scNWrkyGHD8ieII4Zni/37mSkDRwyfII6a oBqWnyHGW9EZr1JzrKo69Ot8VdlJjbhWmry89DRR8pgdxgTBmyC5dePLsu2WzBGDBgVyJK1e IyboNLrBY4r6FVWPST21W6U1aPVelyvVnKDWGnWJ3hR7ill9KphgPv5dgvlEobrlxDZV3vDG ipEJV+p1olqjedjjHjA2mJni89otdqvRnGB3JWm09iTDwPHTT56nc6e6tXq91mjVJyYnu3SJ eo3RetLPBDZV2CWOFsczJ3PvZoakD3WD9ogbxI1srs+X0yPk7Kf3w2FW98+Mv171sMx8lzha 0OgMNv2phSYjbdtoMQi3mA1imsbhdjuMSUkJdney3ZCE/3sSZipRokSJEiVKlChRokSJkv+r 3K1EiRIlSpQoUaJEiRIlSpQoUaJEiRIlSpQoUaJEiRIlSpQoUaJEiRIlSpQoUaJEiRIlSpQo +V8JM7N76aiK//J2XfwYG2vZSpoJ+J1uls8O9Y1VzCkY+8ZqGmf2jTU0Htk31rKxQnHsKupE qqQJ5/SNRWYWbu4bq9gQoatvrKbxob6xhg0R1TQWaEz7EbP7xrQf8RK2nXlpL7ksj45eVsKa WS0LsTbWQWlgYaoV0ijE2uPHGqo002g5y6Yzk1gL/fGyCqo1siY61xGf1ZP11L2SjnXUWUjr WqhnCdWaqaM53ldDCcevWUd9rWSILaNa7L6xM01U/ec7aozPI7Sn37pryVaa19DOmuP3z97u zc/Ny/eWNNeG2jraGsLewrZQe1uoJtzctjzbO6mlxVvR3NgU7vBW1HfUh1bW12WXlAZLCgp9 hTUtzUtCzVnTwjSo/deLfTNvc4e3xhsO1dTVt9aElnnbGrzhpvq/2UdjqC3SHivXtrW21yxv ru/IpldZyoJ0LKD3yvcP71fs/WykV9sSf4d+rzOLTaP3B5Xa/0jnH/a7hZ4MetIsLYKXWdn7 9GyIZA5bzFhij02k50mIP4kJ3RWDBm3LXmQZ9yNL0cUfzYe+XPdizH2HurccH35yn96hS6Np 7NmMP7t/FWAAF2DGYg0KZW5kc3RyZWFtDWVuZG9iag00OCAwIG9iag08PC9GaWx0ZXIvRmxh dGVEZWNvZGUvTGVuZ3RoIDIyNz4+c3RyZWFtDQpo3lRQPW/FIAzc+RUeW3WA8Fp1iZCeXpcM /VCTdueBkyI1gBwy5N8XaJSqA0Z39tln80v31HmXgL9RMD0mGJ23hEtYySBccXIeGgnWmbSj Gs2sI/As7rcl4dz5MUDbMv6ek0uiDW6G4eFO3AJ/JYvk/JSZe/nxmZl+jfEbZ/QJBCgFFkfG L886vugZgVfhHzlsEUFW3Oyzg8UlaoOk/YTQCiFOKn+nR6kAvf2fZ/JXdR3NlyZ2VIuzUGwX tVI0GWXtXlW6lA0PV2YlyobrGaqtYsh5PC4VQyyzy2M/AgwAG7xtLg0KZW5kc3RyZWFtDWVu ZG9iag00OSAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDE5ODI4L0xlbmd0 aDEgNTM0NTI+PnN0cmVhbQ0KaN60mwlcVUX//79n5px7kcVwyUwyL15FFLdcyBQFFVBUFBAV zAVUUEsN9yUzXFPM6lGz1Mfcck3rYuW+P2a5VNaTWtlipabmUqZpCnf+n5lz7uWCWD7/5/nx 4s3MfGfOzJyZOTPf78xAGhEFUS5xSurStUGjP09vXgXJNyCj/9DMnPrU6CLRoV5EPKb/mFGO 7ZM++ZBIiyIyKmbnDBy6/GKbDUS2JKIyFQYOGZ89+fneE4n6NCOqN2xQVuaAX9o0e5Ho2Hzk FzkIgqB1VR4kemAAwjUGDR017tm8C4cQnknUcsOQZ/pnshcfX0Y0ey3C7w3NHJfz8NkKTfH8 KKR3DMscmrU84dnPiI7uRH025zwzcpS4jhg6+k8ZnzMiK6fvv8RposQmROUYcT1Ce4UM8jMW Go1R60dNlx+jGYz8iD1gMMZ0f6afJiZiaINALrI9KLGrwyF9bmEjN2kH7G+wMAiWyji+yygn S0OLkf0NpJlHvj9J9BSNRHvm0gyaQ/NoD52ifjQVvoW0jFbTOnLRPjpEJ+l/+OMebwylQL6F bFSBSNwWl92rwVajrI9kHkIVdEeRRASLKyVkV9zzRLB7q608+atng9jnkP6uFYrbLFqGRaQM sxfgf0A98Zv9Dfc77jXFqtOBOlEqdaPu1IPSqQt1BkmUTInUm/pSJvWnAZRF2TSQBtFgtNfT NISG0jCQTc9QDg2nEWjDUTSaxsA/ypKY4XE0nibQc5b7LE2Efzz+TlC+SfQ8Wn6y153idYsk U2k6mIa/M+gFmkmz4Mq/xWXFQ3k0m15Ef75EL3v9L5cqlf5X6FXwD5qLXp8P/+vo+0W0mP6p pPNoAb2mQktpBeIXFEsr44rSL6E3kGoZLUfKlRg9a0qklSmX0k7ahTF1kHZjtO2Bbz9tg38/ fU+n6Qz9TOfpghahRWrt6Bpdp0/R+tloddnmOervYPwd6G3xsWhbT8tOQosVb4cxVpzZnlNU O3nixiLlC+iNKT7P5Kl+8uQlU3vy8m0v+U7yjYpk5hvO80qK3rv4U2Y63zYr3oKLlKR4bMmW 9fUvv2fMSloF3sRf2Q8lQx7fWnzhkvX0Fm2Az/xbFPb4NtLb9A7mgnx6l96nzbSFtnrD7yFU FL9JSTxpSpdvpx1qFOyhvar//0UHlGwPfNus2D1WzHbl308fYhY6QkfpY/oAY+dDxRH6BOPj M/ocs9Y39J01gk6oEeTUIugYfaaH0ZdGWc3ge2k/60zjED7JFqInyDhDZWPi+/bp3evJnulp 3VK7piQndemc2Kljh4T27eLjYtu2aR0T3aplVIvmTzR7PLJpg/r16oaH1azhrF6tcsVywQ8E BfiX8bPbDJ0zjerGOeMzHK6wDJce5mzfvp4MOzMhyPQRZLgcEMUXT+NyZKhkjuIpY5Ayu0TK GDNljDelFuyIoqh6dR1xTofr41inY6vWMzkN/jmxznSH67LyJyq/HqYCQQiEhuIJR1zlQbEO l5bhiHPFjxmUF5cRi/zyA/zbOttm+derS/n+AfAGwOcKd+bka+GtNOVh4XHN87EcBcliXbxm XOYAV1JyWlxsSGhoupJRW5WXy9bWZVd5OQbLOtNsR37dvXkvbg2mfhkRgQOcAzJ7pbl4Jh7K 43F5eS+4ykW4ajtjXbUnnKmMV85y1XXGxrkinMisY4q3AM1l1Ax2OvJuECrvvHypuCTTkthq Bt8g6ZWv6G0mxHv8hLqhhni/0FBZl9lbY6gfAq7c5DQz7KB+IZsopkFEuotlyJi9npgHu8mY XE+M9/EMZ6jsqrgM63fMoMqu3H6OenXR+uq3Jn4R73DxsIx+/QdJNzMrzxkba7ZbaporJhae mEzrXePyGzZA+swMvMRg2QzJaa4GzhxXRWcbMwEEDtkHg7umqUesx1wV27qgD1lPuRrExcp6 OeLyMmLNCsq8nMlp26ixOJ3fxBHybmNqQumyHq5KbdEpYXF5aQOyXdUyQgZgfGY70kJCXTHp aL50Z1pWuuwlZ7Cr9mkUF6pKVE/h3Uqk9iSWb26v6edIYyE8XfYWBI54/HG2iUJEMLpLBWWP tolypGkh5EmGUqwU0lcsHwR4zbbtZRSXj7ZtHxKaHmr+/EWVQqw6GTVdfj55BUPgrZNZzj2r ZqaWFartiMuK9algsUwNq4JWbqXXk8m2sArGE36yO9t7onhNfLmQMWSjRLIXKztclORIc2Y5 050YQzFJafLdZFur/u3Y1dkxuWea6m1rlKQWC5nxzcyQi0IR7QmwthiD8REhnm5V4XYq7A22 LxGd4Il25Pk5O3bNk5k7rQzJgS8IL20LS8ic3ax8E3ya8ZjdnPGZTkewIz4vc6vI7ZeXHxOT lxOXMai5zMOZMCDP2TUtKkTVNSXtuZAJsqjy1FHrmNqmXl3MPW3yndrM5PwYbWbXnmnbgqHc zkxN28Q01jajTXp+DcSlbXMQxSgpk1IplAGHDMicUhDwU+lDtsUQ5apYXQlUuP9WjZTMzyPT qP9WZsqCPTIGmW7KYpRM/qCTKg9CE2O6jXMMkN0zMX1QXka6/LioEroSv5pLc7YiF3O2yteY LdDl78xq4wpwtpHyaCmPNuU2KbdjYGiVNDSOnJPyMpyYpzCg0ihEM4cil1k6tgqRmhb6ccjl 9FAMtV6gZ5qrTATmfqNmB6RrJ8mAuJ0rt3+mrAd1S5PP2msm9E/HsPVkiCQJrjLIoYyVA1LE q2fkcMRD/dE36ED1fC4Crtx0V3qELDRtcLoazsEuau9sjm438zTCZEEN0vPKOxupbxOfgn/N F6RTBnWjrmmmJARBFJZuNpI9EDXv70RU/wwHWlun/l0x1M251D/ElGRhStTDshT+IVYkydfi NQOC/F1l6iND/Ep/QH35SRo17enpZuVV6AUrAcoOdgWgRmE+TWk9gNZBVIKsC35fQFVl0n0y m+StlOIch5lFVlrlZEe0K6hmQiYmf/P5AEiczTwP+8k5IsDK44Aptcs3D0S785qpW8Ua5/hQ n596dZ1ycZADk0K2YWBTel5JgevJiHp1/UpKg5Q4L88vqPQHzPbyC/K6ECqb0rQj/ZfdbnI7 wL+iH2mLfA2mB57SyxaFtE+J9OXi8P1iCxGjJHpPStXr08hSGKVfojSFoGgJP09poLHltgUt QCpItGQmGynFCKRhJdELKEVixNAoplMK00VNuJXgPgHqgc6gExgLeQjcJfpcpJsjtoJVejie B7w3ypD0s9wccup9KM12EnmHlwLKMqJoxN/SlsIktqs0Qq+OsqpTspEEfxr8JlHS5W+QbiL+ gKt5w+doJahkufON6jTvftHzaJ+9Gp0qiV5LfIa89oAWlpsIBvE94nwxrost98lmo5eYLdF1 SuBv0eDS0LOok2IstZTwXJSbS/Us1wGqgbogDMRY8kSeRO30KfT0XYyBXLKE0rVL1E67JNrC fQRue1ALdAMpYDjk5eDO0UOoHWslXCCXH6J2EnaaEhXnLPdXqsmPU6LNRvH6+FLIRpkLKeNv 2U4JEuTTj+9HWfspTl9BGfxn+E3ilBtNzET8Cq54w+mUy9PFn3BHgef16fRcCUaWIlPwy/Sq 7VFaXRJ+VHzNJ9EMUM5y/UFlPlj85otelZJL0LwUmcJWhhpI4G/JU6mTRSsQ7Qnb46mT7Sh1 Mn4zUc/mgEGgCSXxz9HP9wEbLlrapomWfrtFS/0tUc02Ff5d8EeVoEsJLLltTAlmlcCSe9OP BWVQRlufvKcW5aWfMTH8RUt7NfirUpuS8ANiV0kgj1bUoUTtBEVrJ4TkFkgCIWAYSAZ9wEyZ BpZuNMZvmHZRtPDAV6KdTaLNfKgee0Tl9752h1qzQoq2pVplFRGh3DnimnJDqHMJGt4li0L/ Ats0+KuKWyaUzHZTtIm4CASvSmVMxDXwmydsrDLRm4kI7TdRhb1Nw9kB8DZlsp1URz9Hw/XR 94dRgYbbO9Jw21f3B+qZA5IsVyL76WmQDQb7yHP4P2iisZVeLgkfK47x+fQg0CxXUpHXJsOC lDuChvNMmszHUU/2Ja1nx2kpa02rlX85rdX2iRvwr2Ff01KtH63QhooL7DVapvWhZXonWsZO gRNIe5LGgPXarwg3pKnaT7QDcfvYdPoXv0qfsInUh82gl1kzeo6lErHRQO5uU6EfUcF51v1u mapjX6BkBUvBwBKyJWCwJhCGXsBXgLVKngUyeA3kdwOyeDBQyZeBSbwWwgngKW8ez/FAhB8A 5ZRsA1jH/oHnXwfLlOwC+JFBx2D7wftIuw/8AJ1DaR8FKeAx7RD0kBPgExO8S6KEjRby+e/Z 8+I23EvaTfEze8yrr7wmdRDeFevrNKxjSodwfyDXNFNfcG+GvjDC1Bfc26WOoPSAV8VRz3qP NiZzDRc29QzWbv6WuG6tw7v4OfdsuKm2iigT66mNaA/W9UAjyX3DWhPHy7WQ3ZFrjPjUXMvc n6m5Va1b7kN6PmWY65Z7F9amVLUe/SC2edYd/gIFmGuJaKGPQ1iuIU+KW2pdmEpT+VT3SrjB BlpKzutGGi1GnuX1fJGKNSBZ8QTGeXNxE+N6nN4Q6VZRAwn7iJpg3o1WjKMYvTUNYY0oizUS 34IJrJH7qpxT+HuYqzqjzNewpjDoaZwae+eEIWTo5cW/8WxH9H8Sfxjt1I1GWwwGZYwWmO8j qQPee4yxDt/WXOouYbNUX/pzdW5SEMkMusYM7XFgYzVEPsbgB5oQl1V/JlK66s8c9IFkDPqo lhjsozum2gZh7jlMHHpPigdLH+wsdT2vvvWTeNt2G5w09UY7L9Lj9D/Nfpa6qkf30pthDZds of3GfLOvjUeg394AI2i37Rql2h+F/xdabqsMvTYG9KNH9UzKsZdBXsPFHei5y/RrtBw6I6mx cQXrn9STKqI/JbUwHnLFWB99qK4xTvwCt6w+C3EWlo7TTeov/COMB6A3EuvUeBlj6SSLwVNK 12in9C6PHrEEuh6+TL0BdEh/c7zoL1EHfTD65jYtsjmpgy0O4b40wZiKup0HZ6CH/Ur9bA2Q F+YExE3W+9MU9AfZNJTbCGXKdbwt4uTYOo68EqDDAcx7cg1K1puqebeN7xpu6yBuQM/m1pwr 18gu1hqYo9a0zVjPgP6g2IlydhqDyaY/jnUs3FqrqoE6ah3LluuQ0jGwxsh1zhYJXUnNzVh7 Psd4W4kyMXfr7az5fS9lyjS2TNgiHaiHkUpZfAdl89lYp+ZANz+AMX9EnNU7UqJcm/VaNJAP w7tZYKyukrDFmI8XY/1bTEP5+3QbVAfR/Dv6kWXQYtCdD6BvsRY0xDh+VY5pVoOGYpx3MKZT Asb3JfA8EGAu+ugCmAIKwKvyGeh+r7PNNBGMBwvAPP1h6IEPw+55mBaCmbyKGM6+F4v4O3Se F2h+vAIdZd/TfjaS2oNsXoA1qYCq2FvRKrDd4/IC0QfyM6jPWrCNDaXRbKg4xUZRBBslPmDT KJtNE2dYDA1jMVjbO0DeAeGhNBPpriBdK6T7EunGI91N5PUH+AZkgTjdRXv0lrQM/slgnnaA bvKmdNPAmmRgbbLfBFg37FHKrWjbSIcksD8vG2/SCWMDzcb7Eup5VX+XOkJeF/lUglsNc1ZF +I8g7qa0V+HPRls0g78D/51q8KX0CN8NnXYp3n0pxnUgDfGrh3kD7WA7jTFbTgh9Pj3JjlAf DruAXxLf6d0wR58UX+mRNIlvwncQifEVifmtLObGstQXOPSy4jr4GFxGWNrKY0F9hP/EN9CX zaF0PhnjaCSV5xswfwzCONxCvdXcKMfHTgpHfeJANxAMQkBFy00C04ATVEf9nkL95pj1oyCs Tw/wk+Rn1W+8Vb/GKD+xqH6wWctSZVDVqt9qs35Um4fSNu0WxoaLprGNNBm6xFS2mqZjrHyE dXkX+wF6yvfgIn0A9wN2jN7TdtKn4Bk8q+HZiswljrKN4hA7JY6w1eJjpAvGswb7AWvv9+Ai BUEWxI6JAjz3kLZTbGFLYHfdoIYsRZxjCVhbOmDMxIvvWTLp0F0CWQ9xliViPC3BGLlBm1gK DWIJaMsO0J/ioRsm0wyke4n1oIEskXJYvvssryDcRl8wGDxkufVFodEVHKI+ioGUaGwBK8DH 1N94DuvQClBHfAF9LtOvM2Uak6m//WP0WYGiL2gMokAC6ADagR6gOuA+dDYuUF3doPa2f9NM 9H0SuyyGQ95d6htSD5Brpi2LluupYo9eiYbgm1sEFoBDirL0jr2s1tzj+nfGHNyMlsK2DNfy oOt8jTk1+79F6/Kf7N9IfPZcHPy8KAAXwDUTisKa+iCo9pd7HtPugWdv4iAtKQ1rL6KadIvs S7EDzAVbwUlL9gu4bPGLlPmsLw355+IUWAu+AkekHOtLGPArsmmgC4aILZZ7Ucmm3kWCcj32 wQ4v6ZYbL11rvTklXT1bHEDbN/sP9k5MPHsdueJXsBVsALvBTsjLYe0vAyr47C/EgkiQAMy1 /9Q9sPYEjCCaUYKB0jX3AbBewr2vcbcP68p39AQbTqHgKWnPIp9Uiyn6DNTNZAj68lnYeLWw pj0u7VhfG93XDodtWQ2ESmxjioC90ZX9TNuhRx/hHbFOrVVs5bF0nD9J+7XV9C/tCDVnp2Eb PUkf6UNpJx9NO8AR2Fn7LHcv1uORmEO2Q9/aw510VY+js7CNs2C7fg0bZCZ00T8kejYbZxEk 4fu0YFCfB2pO0BEwUEfaGiBcE1oAaAzCQCzRnesStp6qWLwODsN2echHZvI8bMHnKZTXcJ9n /4BdkK21ZuvFm2Alr+0+Ds7xQPdJHih+4ovg1nL/gjUvA7Tmi6D/qr1bwVHvCZ76g08tIiQo txzyew/zdATcVWy9VkHCF2mdwCQi9z8tWlg0l6B+L4LdKKs9+vwI/AlI7wfC+KKCs3xRYRDq cBt1iNCho+ka3ZS1Qd4xYATKvaV9ogXCDjyN9vLD87FgpoT/RrlWvL9l14VDnsTzqYbZXprN 3ktstveib+29NCfc7eAAZMttx+jftmOagXA++AnEaN/TbvCN9jMdB7/TLToIzjA7fQVusjLo 4zIobwkdBRchOwauQHYEXOBl6Ci4qPWlI+CCloJ8Uuh37V/0PSjU9tBc4IKe/gOvpZWB+xmA hShC+S6tkV4F47YK1uNK4hrm+gfgDzaBflKFKqJ9fkf7BMO9A7ey1leswTufx/tXkG2hH8S6 IW0caTvUF261Vy4oGvZcd9gjFTHvhutHMa8dprZ8o2ip9r3zaAxLwnoYi3LDKcn2Fi0wwhGH +Rf6+kjo9t1h73SGHfOQtFthb3SX9gzWpgFyDlZzrdzjPQwd6TD69iSF+W2mNL8qlGZ7hNKM dpRmfx/2UXnYMFgXYEc1V3N7afvMPvv/3n358CK7SpbhyVvG2cMxh39B/tLOLrnuoJyzzGdv 3WO3ecqSean9/vLIA/oO3uGs5/mS6xDesSnixqFNe/DesBHOiRTM0V/pPcUd5FVX2vtY1xpJ +xD1kmWF45n6qk7yDEOBtcf33OIS5nfT3VW0Vor+oJ7vOYXnXMJEzAFfMN1dSb6b58xBDxdL rXOHGN5bdAUJ0i71UHTeIG6AKyXfzzpPSPE5S0jW08TqorMEH8x9i5WqDc6JpkZ18Qt4F5zx OS/I8T0zkLau96yg6FwgDvWN5vtFXb0x9UeZrYyKKLsv1uAfsZaOoUpoAzv03WRrn60l9HW1 L6zW7oaYz+UerhN6dQPxJ18JnaI1dPP3xGa1FyFt46qwJ6pSVbVHCDAvpKq9tbXkzzPR7oPI Zh+A8vbC3rMrO1Duk/ZQa3hVGuK7n6dsvs8xDnz2qr37sivpYY8+wHeKvdL2lPla8dGeZzy6 BcrYLu1UzzOevU9vOcgDbgt9tRqbdWSdPc+X3E/FOKzA+uK7XEct2Sx6xJaNusl3ShWj8e5N 1PvOp8XQX7Z69nrN/VYhYBsH8BF0EHZBIBPimvY7wrUpQH+N8qRdivbb6237qmKAt+1N3WmE 5Q4v0pkE6ijKevbX5bru0wYW+I6qwj4/UVhogjHg3XsW/dA2N8AS7YS7I2iobPHUknvPYjDo d9fesrWfbO0j3wDX2W73paK95CIwHlLNceE+DU7IOgGZ9/iiPVxx0ncfV+3devZva0OnVfu1 7ht45in2tlit0kjdTY4juTfdmqIQtwxxYXp7jN2vQSye2a/ONDR2BTrxwxj3LdCuidBXMWbV fslbVBbfymB1vvU25LfoCehuj+pZVI/nUWueJBrJcyt+mVIwbz8NfY7xQxRv6wP9bLyIkjqc sQP6mj+eNc+FHlX7ff3gpmOdyDfPe/ga6GvynOZpsvF51BxUsn9JnfymYw7sqeydNNsaircP wncF3VK7JEz9sLRzIkv/VGd31rka6tTEo2fyp8Vl+yfIuxvmPMTZ2kLXHAY7XO5PltBdUc5X co/K+6x1zuUtC/VV+1QLqD3fBZt0Id7Ber7k2Rl00WDEpWPt2gndLpKniywu9/B1UYi8HuWX xXHoxk/KvTCsdbKsGnimlrSrWYG4hW/CzqPIjm9iqNyPkeXIPTcTkVnsPDILc7rpfuKjh7fn ue5C+Dt4zx89540KMR08q11yM/nOnrNEfkgMNM8TxVcgBDwk9+c8FJ0jijVg/l3vvd/auys6 I3yM/ywmFJ0R+qDOB9UZIfF09+/6dLEE9AMv+ZwDPux7FqjO/zxngEXnfVXwLi8iL1JpJtEg 2V54j0rstHuhVZ/H5Hurd5T9Jsd6EuadLWiLlqWcv5XCXWdvpXA/5z/3de4zjUL9dmMeewt2 xFT4dynbwmNjeG0NvYtFlBcZVw22x33hTT8WlKFqfm2LZLAdvXnpZ2Az+5tgba3mU16xcv/T OvDj0E3MuT0GyPnJxhdb830TrCcuaQ9j/SugpmrvX+67xoAw6mytKeY5ZTp14UtoHD9GT1nz qJqzrTPJW/JsQM757GcBlC1dF/adnN9HW8g52FBrTif4q1FnozfoAiKpA+b0r324ibm+LnsJ +b1Ez2CuDucbUM+q4lvU6XETimR5ojnm+gDQQdn5Y1DPBHoe8/tZY6u4DJv7LE+mkWqdJczP WH/Bn1LHA9tBFbxvoNIFjyOPEKz9eE+5l4y8s7Buncc8HqfW6PkY83jG1gPr8CeUbK+P9rsM 3eNTGm5MANeFnNOH6YOx7l3FN3AVc2BV6ivhJ8Q24wExS+kW5am6Wm+bUGuU9QS+0zayzdGG 51gt4cK7tmS/UkW1p92MWildAH0GPSBFX0tdoe8FYew2hY4TjLh0Fb8WZR7GOnCYnkR+A/Qn aALmK2Z8SPWgM3wB+cu2sjSHdxFXeQO0g9yDPwad/TjGA+om98plHkYDelHuqUubGnZHurKr f6a1Pnb1rPuwq/com3oTrZD2tbKtLbta2dQb6BXwhXT5dXqLnaX3wZtsK70LlrOxtBq8CNly rT89xV6jFXp3yE7RG+wcvcM60yS4W5T/LD2r/YQ6XqD9iJ+OdHvZdPqIdaB4jJ9cFk872VSs 3Vm0g/WlSK2/uKj9IS4gfVmkC8E4+xxpgthZ6ANZZIe+NdPWBWN7KebJpdClvhA223IifS4x /Q13Hq/qvsWuu2/xqdAzPhUMukI9fkC8znXaBPfftnQajn68zRqJ2xiPr6BN7Ao55ttgDNWD /dUe/X2VWmluccz2HL6DePUd2VCXa3wCdJhA8bjUTfg+6CNRGLcTMc52Wt+q1MXUNyq+kPtY SsdKFydZYzFJnwC9pjHWlLO0GW30pmITuWRbyjNlbR89pM6V0VbaXBqoraedaN/lyn+WGmvQ JbVnYTPWoA3ynBnsZefEn2jntXi/FbK9eSRs74Y0TBsqfkS7L0BeI9BnryDuM/At2rQze5zG sflgNRgBXf4cHZZn2WCZPMvWfqU3QHfGwWx6U51Vz6BZ2gFaxZvQKp9zjxetPYCybCHdBj95 9lr1jvhGO9IvLFkbq86x5fl2MsZlLffXLNV9h3UHT6CuAHkMB3JfYUoJnmTrtQCWSXu0Pqhf Q5rKJmLMy3KCaUFJ9B7Fgawt3HvRoCRIL92aJYG8Cty7gLwN3NIoWY97pWvzF/UoTR4G9y7+ 23r8Rb5OuHfxF/XrCLc07rce92rnGnDv4i/q0RluaRSrB8ZXPwnsiDv6Is1fnt0hnAiaglzF P2gaS4X9tU9974P5IvdxfH9brD1BL3qMmAHe4Ax6cS3aCFbxGtQLcevt5elbsJp9Ka6x5eAE mCiWw39a+0oraxEuYbO0ZhZjJUSF/5Tw2lrlYtTQyipqa80sGio88utaQDFq0A2FvOcRSKQJ rbzkrnxra43AY173Oq0EvSw3ATpEHfY81VF7F+o+qLXXBRd20zK9u/sjuDF8IyUjzRq9N0Ua 87EurqDnVbrqmCflXYbR1J2Phu3cGrb+SWqI9TIe626YXh62s3nfzGa64lN192Ac5mu5ji4U V/Wd8K9AfyRQkqn/iAiZhzw3t+4pljVd6MgZlMoz3BrPgL4rbYCXqCf/EfrZH1j/b2O+PqX0 9ThrD2sE6OVzljIXjPqb85Z7PmOL8jIC9PIJzwWjpJ+fF2d1l8gGw+EXcGeAWfC/Ay7rBeK8 cUhkGx+I4UaG2AgdkBkHxGQwE+ENiF8PLll7VOchzwQ5paW15VOKLV+ct48XmSDH/qDYCBmD fzKYifAGpouf2VGRBXLYIBmGrXxUTAczEX4L8evBJRALxhlR4rJNFy+A4ehvO9w1YBbkx2Qc +pvxc2KjUV68Ctbpb4sdCPcE6zBOqst7q0YS8qiAPMohj/fEJiMJ+VRAPuWQz3siH/HHwXXz bs5fp7X9QYG2P2DvbhMv2LeI4faeYhNkdoTXIDwL4XzvvZr/Qzx3dO6F997O3xMBqv0nmHeA /gr3Van/wN+5SCYqA4RF71LuEhZH3heSFN0T+v/Cc4/o/4L/+OzuPjFy/p6i/YfSKb4H8d9j nPl7zHtHf4UIBtdLyB+DrCvI+bt70t49D7knIefc/71bAXP4JbhhcIV5R+5/h63233M/c753 HvbM2X3lHF18Hr6veWwO1okscQiMAL3AYYu5YJTyH8R8fhDz+TyRbX8Zc11tzPEHMZ+/hPn8 JczndcQGexUKtFfBfPgt5sNTSDNJbILMjvAahGchnO/RPzx6B1+k2YvpGR79wlevgC4hn+O1 kCZQayDPQGEfxIJE0NaoTkl6DGzf6uq+Xx2s88m2N837ffp8ecZhnXcU0HJ59mDkw16PhM7w MD2j7u6ZZx3yLkFvPUccNt6jN/RZtFve1wPJxrs0UCLPYuS9QXluYpQVbyO/ZAXS2e1wfc61 +HmEj0JPAJ67hvIsynvf0PdcRt7/89wblIyg/niPJHk/kOdgvUWd1NlKdWpjaw2a03ew6b+z nRFv20NQF3mGVhHvcBhtIesl97S/omFqj/y4uMKXUrTnDh30qpbe+3Kx1EPvg3n/S9j6v8Em bYc5A3qQbSxF8SWwk5fQE3yT+BDylvwsZcq7cKClvoZiJCrPTxEOFTvlHoneSt05zzQGw3aW 51ZV8S7WGQrs00jzrgXVMesC+9Y8/8hRd6s99/QAny2uy/MOdV9a7sHvhZtA1eTdO7zPv1Gn Q+qOnsy7Pt5/MS3hu2mJrYrYaWuPesg9m8n4juXaF4G6zcJcIffb96v7k4/zo9TecJn3Jfm3 6l5knLobGYY6v4l57gdqZ+uo/veih9Lt5J6p+b8PT/ML4mv9U6oq70BK9DJIfxDrJpDzmLqH ifz0HtA/xiDPhUr3W2SrWbT/LffOUXYbvQXVlVh3N7na7/bc3/TczZR65hl6FH1RB0SCMOQX K++BqnuXFcUFfs3aoz1HYcYYqo7xMIUPpCnGPrHOFqj2z5/Wu+AdhlIjfRTqRUR+ZN6bli57 B8j/3+oGWRLcnWCh+vcv60d8A2rqZUkSASrI+4DSJudpNNNjq6PtVuGddyDuOhtJQfoVmu75 Xy7o6DqeC5D7fkY4hdsTKdXWlFLt1SjcuEHd9HBqJr9Dv7UUDp39bX0KxeqbaII6c91ItWUe tlAaAoYZ4+icsYTOwfYPsWu0E25LPUU7qafgeyXxB9TIXSYev/jDXoYW6r1onfye8Y2l6MfE z0Y/msMPUQbqNFRvQAP0ymI79PYmeoA4jTlkEA8Tp2DDrAVLJSxVe8YiVbGeOkn00zTSfp38 7T9SRfvrxO1DaAS+0WQjAHPqGrgfkW6Php52WOyQ977l3WC/SPPbl2kl8v2MbJpoEL7LxuKA 8Q7cXLHfFoBvtZ/YLe9C49vJtMeZepGtDXWW6dX3uo4yjN3oZ+ibxvdwL4uTtm4Yd7niJ3nH mxfSq/bfkCYE77oWID3adDD/UNmlx/Se1M3sY3ey/B8+2JwVtQ/R//1ohbw/57+MvtGP01x2 nKZK4N8EN0fK/w7Yk04MoKVwfzdd+b8CmMsXae0wx1e2SFUyy8+60xlrHegl70vINjaSWBDm /aestO2Q5iVkVR0kWEQjrht46N4uvQ9eRdpxYBLesBko561PvBYBeQ3Y36v4AxrJsGKR9ihv D1eyAn7ARtNl3lfriPSjwbMg0vJ7WCyBHTIeLIAtshR2SAOwAOO8Feh+L13vXvqWNQcp7qVP oJ0fk22u5RVOhptOVPAggCV+5wrc0KJwQSVQDbQE+NQL0IYF5UAHEABaAHnnXoZvmbhngYOg IugM2U+Irw3guh1wd4CboAt4GbIBYBl4GqxB+m9N3I+CwUjjsGTfWXwNZpj3k+4sMP/noxAz UgH6q2AMZCj/zkSAvAvQj3fagTngTTAbnIJ8OZ5B3gXog4IzAH3jRru4O4GRYBXip4Fd5jOq TLxoYS7YDZBX4XH5PylgM9J8BPdPPJcG5DtlAMyOha+BY4i7BreeScFAxD0JUPfC7gB1KxDy f2EgQ7w7i+h2U+TZC8wHieY73W4CdwM4bcUh79vRSF8GtAchoAfIAwdAWbP93cGgo5X3EIDp xd3W7At3H7P8wo/hbwPQbm7k7V4Eqlnx6Cs36lMIWeGXQL7XCYA2K8CqUHASdTlojR3kU3AD /rNwg6z/t5lgjZvheEaOCfSHO9dqBw9DLR63eM6kYJhJ4bsWpyzetPjA4qyFR55VgldM1D17 OdaSTApXg4tgz/9j30yg26jOxT+rRpoZLaNltO+2JFuWZVu2ZXkdr4m32I6txM6ekI0sNrHj BgIhQNnKWghQWraWpUANJSghNYSuz/AKrynQpmlfWyiUQhfqwutrKQlY/n+jK6+hJfT1nP85 7zw7n38zd+6M7v3mu98yo4D8CV07DSFv6jdIbx/J/w/oSJZHoX1JVmBeU2uRZOxFlk1Ipmpk gTV8HXrWg0R+30VOTK9Z8P/1sv8XEHzg0f+fQh3AlkLcvQDbgpmeVJHjxP6Uq9Y9TlyEcGHK xQH2IXwm5aoEjCLsRV1GUq4qwHDKVQ3Yg3ABwlDKVQMYRNiNTtiFsDPlrAfsQDg/5WwAbE85 GwHbELYibEHYjHAeOmETOmEjwgZ0bD3CupSjGbAWYQ3CaoRVCAMI/QgrEVYgJBH6EJYj9CB0 I3QhLEs5mgCdaK8DoR2hDaEVYSnCEoQWhGaEppS9FdCYsrcBGhDqEaSUvR1Qh1CbsncAahCq EaoQKhF6ERLomhUIcXSxcoQyhFJ0zRhCCTqvGKEIIYpQiBBBFytAp4fRefnoWB5CCCGIegYQ ctEJOQh+dJ4P9fQieBDcCC4EZ8q2DOBAsKdsXQAbghXBgo6ZEUTUaEIwIhjQMT2CgBp1aE+L oEGNagQegUNgEVQpazdAmbL2ABgEBQKNQKEuJNojEHAELAN8GiGNMJU5Af8I7X2IcAbhNMIH CH9DeD9l6QX8FeEvKUsf4L8R/ozwXwjvoS7vIvwJNU4i/BHhHYQ/oC6/R/gdwm/RsbcR3kL4 DcKbqMuvEd5Aja8j/ArhNYRXU+YVgF8i/CJlXgn4OcJ/osafIfwUNZ5C+AnCSYQfoy4/Qnuv oL2XEV5CjT9EOIHwA4T/QHgR9XwB4fuo8d8Rnkd4DmEiJYJfwv8tJdYBvofw3ZS4GvAdhG8j fAvhmwjPIhxHeAad9zTCOGr8BsIxhKcQjiIcQUghPInOO4zG8gTa+zrC46jLYwhjCF9DeBTh EXTew+iEr6LGhxAeRHgA4X6EryB8GeE+hHtTpk2AexDuTpnOA9yVMm0GfCll2gL4Ysq0FXAn whcQ7kC4HeE2hEMIt6ZMGwG3oGt+Hl3zZnTNmxBuRJe+AZ1wPcJ1qOfnUJdrU6Yk4Bp0savR xa5CuBL1/Cy6yhXo9MsRLkM4iHApwgGESxAuRtifMoFPxi9Cn3AhuvQ+hM+gTxhFY9mLMII+ bxidvgfhAoQhhEGE3Qi7EHaiqexAn3c+wvaUqRywDWFryngFYEvKKNvu5pTxIOC8lFE+bxNq 3JgySoANqHE9alyXMl4KWJsyfhawJmW8CrA6ZYAgjK9KGVyAAYT+lIEFrERYkTJAmMeTKQPE d7wPoRdhecoAYR7vSRkgsOPdCF0pvTzqZSl9C6AToQM1tiO0ocZWhKUIS1J6iJt4C+rSjBqb EBpTwhJAQ0qQF2V9SugHSClhAFCXElYBahFqUoJsrdUIVQiVCImUEAZUpIQCQDwlJADlCGUp Qf6gUvRBMYSSlCBrsBihKCXIiowiFKKxRBAK0JDCaEj5CHloSCGEIBpEACEXIQfBj07woZ5e NCQPGoQbfZ4LwYl6OhDs6HQbghXBgnqaEUQ0QBOCEY3TgD5IjyCg83QIWgQNghp14dEel9Kt BbAp3TqAKqVbD1AiMAgKBBr1pFBPEjUSCDgCJk0Dp6FfGjgF8hHIhyBnoO00nPgBbP8N5H2Q v4L8RbvJ/d8gf9ae5/4v7Wb3eyDvgvwJZBLa/wjyDhz7A+z/HuR3IL8FeRva3wL5DWy/Cfw1 yBvQ73XY/xXIayCvgvwS5BcgP9dsc/+nZrv7ZyA/BTkF8hNoOwn8MciPQF6B/ZeBL4H8EOQE yA9A/gPkRZAXQL6v3un+d/Uu9/PqfPdzwAl1gfvfoO17sP1d9W63NP0d9Q73t9Xnu7+l3u7+ Jhx5Vl3sPg7yDMjT/B73OD/s/gY/4j7G73U/BXIU5Ajsp4BPQp/DIE+AfB3kcZDHQMZAvgby KHep+xFuv/th7iL3V4EPcZe4H+QOuB+A9vtBvgLyZZD7QO4FuQfkbpC7QL7ERdxfBLmTfdj9 BfYh9x3A20FuAzkEciu73X0Le4X78+xd7pvZe9w3sfe5b4T2G0CuInPdV5IV7s/iFe4rkpcl Lx+7LHkweSB56diBJHcA5w7YD7QfuPjA2IFfHJD0CvaS5P7kxWP7kxcl9yUvHNuXfIb4HLaV uFaqTn5mbDRJjRpH946SfxnFx0bxplG8aBQnsFHdqGeU5Pcmh5MjY8NJbLh7+LLhw8NU1eHh 14cJbBhnx6e/c2TY7moBSpcMq3Ute5JDyQvGhpKDW3cnd8AAz6/Yltw+ti25tWJzcsvY5uR5 FZuSGys2JNdXrE2uG1ubXFOxKrl6bFVyoKI/uRL6r6joSybH+pK9FT3J5WM9ya6KZcll0N5Z 0Z7sGGtPtlUsTbaOLU0uqWhJNsPkMYfO4XGQOnkAyxwwEsyONxTZJfvr9vfsFGY/bP+OndRr bW4bkae14o1dVnzIetB6s5XUWl6yEJIlr6BFa37J/Cvzu2bKIJnzClswUSd6RNIkz03s7GvJ sK4JsbgsM9dO0R9o0ZpwrcltIprdJhwTXhfeE0jTt3Uv6QitFtdqp7WEpIXuWo1bQ8h/pjWk pCmOt2jVbjUh/5lWk6Kkhhb5ikG+u69Fy7k5IlnHdXGExNU1tkhcpKgFI3EPjmO4DkAq5VHg JncLrOsjIk7jEM+f7OsNh9vHmenl7YeV3asP49cezu2V/0o9qw4rrj2MJVet7n8Sx28aeBIn GvsOG9t7VqH9q268EWtwth929vYf/rJzoP3wZbAhyRvTsIE5nxSxhoHwupHRkXB47zr4s25k bzjzD/bwUXkvLDfK/0b2wr78O5rZx8L/8Ad1A6wfgZ+9M417w/87f/D/pfP6V/1Y1q/DMIyW n+iQP6c1GIkxWBWWxFZgXU9FxIiorK5n8UmsFWPwzRiBefAbMCWG45slPUXkxhVkj10tXNCD 9zQxRB9W9+prr6597dUTwBN49NXJU5O6qVOT+kQiGi0uwgWvkBGjhmAYhcLvKyTi8fLyWKyk ligrLST8Pg1IoKy0lojXkrESF5HpinpmWqGz3Er+/KPVZNeUgrjY3Ty4LIdw2zVGnsY9tNus rOkqNGi9ZaGQFHUzrIKglQplXmWTr2ldpS39FMlwDOsRRZuGphheqfJYDVYNlW6hNWf+TGs+ bKR2fXgbWVy6bXk5fSerJCiF4lm7ObeqxWsNewxag47X0AZRr2AMei5Q0zZ1vdJsMzMsy/A6 VmWxiEoVq+B1UxUYMf3i9BkqSBsxHxbAvvkMcYC4FOsPy14g2S9VWnQGvDOXV+eo1WKAY/2s 32fJyWFxMccfyJ2UONglnawaF6kQxuMiyfN653J9kk6Gwpa6ujp9IoqtX7c2bE7ozYmYrXOy RIjh0YmShDUai8V0B66ZmBDwmA4AWg/bJe8/f9niooFcUb4thUSQ9JIaEm5QoDyOo/tjZvy4 l8ohSUPIJ3oEJV409dajtNqca3flaBQccT+js4Wc3jwrS9yMp+/Hv1Mj2jUUyfAqvCr9fVat JGmNXaRSnEZJkkotd6P8iBXHRqbfoy6iXVgFdv5CzR1xOjHdOJE8FqFslM2kkhPR0l4TZKdH pNAKeRYw6rpJQTY4PDo5kQCzsz/1yX1hlrgR2RkYIWUyugjZKGMlosmoUWbNj5JnTF2kMas1 AWlLR991Q31xR6hjsGXZnp5ygWNJilaqTI0bL2ra+uBIXWjZ6F3f29t6cFWIus5Um5Mbzq3b ecMX727pPrCiwB/263RgSDazwRj0W2v2PTmy/oVvPXKw1VsSlF869mMY9RysRQsWxDYv1MDT cDwuqawet06r06oyeaihxwN59hFJ1Tc7K1hyePT5ktjJSVDAkX/cMTN5jcLvldejAZaYF+bJ yOvRDze5lqKe0wdrB0bvGL88/YbarFPQbzNRFy7cPvHZ+mN5/Z/bc/SF1P4HL+2vsJHV9Tfe eO3F2zvyGZ3dSF0RdNdd+PiBtksGYh8JVVuuvu0u+d7Kc9PA3CLYY4tWhU5lEpWiqAwFbWqb GgvCHcMlfSgcDB2GKG96z0RAamDyKuWZhHtEwBHJi2aSmUjGePeEE/rEJCwG+bbqQAOZ1QBK eBpT/dOXQxqi/F7Sm7GIBVtzWqM0OM3wAptmluNHeJ6klJyOTS9bR5CsmsgcmbqVM2kV9G+Z IjOxxUxN0iaLzaRO7wBrMFktBnW6WCcoRIvVxDOC3SBrEDQ2OP0napr2YC3YMws1djQ/XIDZ x/F3nyrAPB7MME7EjyXCFoax8MfxICZhQZyUtA57gQPDHQ4cI0ulXguUcEek0ln7h5UejUZh EegmdbAWovoEWje6k5MHrtFkNPfU//iSM/pbsLzK4wZvxtlToDqRIRUKRvYus0uNoqZJWsny jDYG+fPAXVdsXZIb23BtX+01le3pn/BqklbxWhV+l8PKbKbUSlXr0PUdVzx/dUvxmmue+NH+ lv0bGixK6nLGZLYauJxIbtnag7c/2Nd/zZqo04XvE3SM2WIxcAFPWmMwq1T+HHvjZcdGdr70 zL3DDVZ/vmiUbXX59Bn8DPhwE9a8yFa1JoxjTRzGUrRuedZ/wrxhzcVKQGUSd/Yx2ZOiCcYN yHsykFpyos9i8+gVxAe4WvRaLB6DgrAyPEODvTDUL2e2sqNRTMDKqcSOLBpNQ4HXqC4sNEQw 1mT0RFhW57k5ghdFcG0E58hIpDLKQ2Jd2lMYURswVvREeJOxIOqt1NgDPfakbjYAyMMUYnV4 NBaewEvkcAJLYO1aIZywRAXwFBBUhBj8gz/yJJ3nfMX5c/fjsqMNBEk/OU8dmWhiiOHZTYb+ McEavVaLR08TbxBTXcr8UJ4P/ylso2aBJiYpvcWu2ewJO3XUcZpo0LpyI45hrUWgqTkNbvvw do1ay0Ncv3O27WGjy6BS20KOjwbIh+1Bu0ZlcJpkvzs8PUnraS9mxqLYyoU6/jYcT4BDziF6 MR5z4sGUoTdvHM87IjFzsQSWTsbhPv33OsxbCDMBhSldEHMoWu9o2P3lX940/NhIpat56Cs/ u2HP2EjluKdl7/Lt94y0RwzupSO92+4e7ig0kGs6vzXx9M39iT1f3b3i+eeO3dhbNfLo/pbR vmjnJfd8+Y74kpHlkfb9d913hzw3sB4qANZTjNViX104t2NmUcnTIWyc6JPUJaGE01UBv3kh OiF7YE1eAR9yiSqzknE6/RXjOPUNqaDHnxSytxgmBs7SLPtJsP8TsZKMx8UtupNTQuLkicx6 ePLTXwqpimBE0WwQZVebzUEKSf+c4ZwVrAgqEOza11XWoC8jaVYMOmwegSFiSjDVypEhghV9 VrNXzxDvKYucuHXN9euiz1hivYkj/XcOHOjKJaebL9neYzXs35z+tcGrVqmVFMVq1XhR2Yo6 /9TPZAOSs0bqiaA7p3nLGl9lvpjuKOraLK9OanqS/CLYThs2sVC7z2ICEcPqsHIiIaltdfCL 5QrloSZ363FcTrZzcEzSFGCMjiF4kilgCop5+alZU2/xOB46IrkXpSpyVMo4Vn1YjvEozsG+ 7Kj/VZdd6K8JME1F9gaQM2abzdkVclouO2vyixDhIKHjgjV98Zo1te5gXU/f8rpgy+XHLqg5 v6/SRioYTq3SFS3Z1NAy2B4K1Pb0dtcGa4fv31y0sqVEr6QeU8qumrc5bbl13eGChvKikkT7 Ril5+1C9ye21WRWizWpSe3I9wcZVsUhjeaF8uL7ruu3VOrNdb5DvwQNg4yNg4z5s2SIPqcKU SotRZVAax/HAU5K7R4NMztY5NQHu7tSJmO6EbKcfd3wu+s+Y3by4RY3gtFKO+be9QXAmn9Uq +/LX03doWAhevJYlr1Sz1DsKk8VuVH94rxK5ICW1Sa9jTDaLSZ0Z9yHwOzaIM2Fs96Jxm8OY 12MSOTawHPOwoonzhpUQVSDoB49I9PyQW5eJPSez8Uf7yf3laS2KR6QC3djZBuoiy/Y7nh3c O7bNY70XYpUX5megiXsEbe3ujvaD5zUL0GqS/bFBgeM/3T++v7buwDMXk+LMRD/6Y/+V/QWF A5/tm2uTZ/yL6TPMFTDjauyhRTO2qHOiHJeby7NFRRhWnGPhi/nikmqL/zh+DByzjyiSHJIl vjx/OavGzP4irtriy42WqBdWMjA/UAhMFSpQqIsgklkgD5Ejl+7EzF9ZT7ZzudBc9IKghc9s BTKGT5hQ0JoLXyWiqGDoiMLgyne682083klAfWmwhd2+AjuPbyNIwe+x5ukVSwn8T7RazHXb Icjhywn8fYo35zqcPo1ClasRVCSp0qnJkx8Vom29hnrCaFODR9JrPvwhVclplRSp0nIfPk/V zlRS4Od7wA+9Qb4IVWcVduMzxEHisrnqSeVUusbxJ44GgoEqyHu//g1MG8ANZKB4nHBJZgOm qgo6AwrS25p/2tZW/oGk6SQ7sssA/ARKcCZPgqd4dVLWoew5ZCWK53CirMOZkn9+mieas0U9 wwQC82uvOFlA5eQbbTq4rLpp7XBV9/m1ZlO0fccNAwMHSwxUIGS06yj8x9HdTeUrG4vdWs5d Ho4PbWjTWwUNxXCqr3k6pPyKNXtrKm667YahxqV1q3UaEmzwj83Nsb6dw4MF/uaEv2bXrf1y dKwBrb1M74GqpAG7e6HWJD0nOF1ujz9ekXAkHGBFekzWl6NQYBMVPoqJnQ62OfQCR2nMLZqO 6g8kpnNmnWXsZzKjt5OT0YzhZbLqzI8ez2jPdu5XmfXLgWDmqUhgpg5nwDUxmU0qm0+APkVR zifIl8Xitp3Xr1x1WYmeCIbyHRTOEip5zbr0FN5Na7Raha557WBF9YrqXKPycdYZLyy/YEO7 4I3uairtayrxCsSV1bccun5nfZPUL2h0WrpCCR6Mgj/pQVtFvFjvb6/L95Q1LV1SYG+pzqvd fWjlV5sbirq37RmGld4Bml1BvoCVYdcsskaHAxNkRTpDpX8LuWmcZt+PtnneD2FWnZVgSavx jJSb1cHUycyDick62ADMlvaS49Oemk0r5koRca7QV/izfl2OZysYjYHXuIrbK6XzWotc6lUD 9Wvr83VKFaVSW6q71hR/5T5TybLhOzaG2urLnAy5TB/wis4cV1ly1+C2wLYdnjyPVsN7/S5r jtPw4P01txy6bqcEKb5Nj6FVSiXo3VgBJAaL9CKx3kidDw6ofHFZPTaTr4AMtkCjSokpNEWn HW2Vi1eYbCCZkl/WS6xkpnKTrOd86lnrk5qJ9ObZamVmgYpofUbInHyTTUcTnsz6rFpZlWti xKL2Hdf3hztqS01bcdbosVrckMGnT8EyLUs2FXt0Da3zF+kj3va6PHdpc2ubu/Lzt1y/s8Hg LbTiaUYthwo1M7WpeWnx8h17Bgs3bqvecetK0Fwn2NM94N8KIXYs0tyx/JK4gsJU44RGUvkF 3kUajf7oOKGWTJhf8a14PN8lCHzJK/lt/K8kV+e8BEiubqKT8iLN5J/g2cyZtWk4h7NmLMqv UCywJmJhOQtJaiCzLuUe5D3StSdv28HQ5w1JW9uLVCoVpVQr+Zq+zSUDVw8UWMtX7Lt7U99o u+/R7rb6zZ1xYev5Nyb9xFvNg8vyvbX2zTsMokHNsw6nTcWbDXyo95K++ttvvXprbX5DTzxW F+nYUmGLVGP4dE36EFlMX4glsZsWrT69S3Afx9+CKCHgb0n+1uqlUmuV1CqKrVIVheXzby5b 4qp+s8qdo1+6tPxNKadrZuITYC1TE3KxM5Ep9DOVISr1kc4++dRF+SXDxLIPU1BmD+EpMD/P hJoxuzBj2efCZlEkiwlSoWQVjMkRMIdrClyc8AKnphQqTsO8OCZU9g02RxIMRZEU9GIYtdak y68JO/kHL2M5AlIzNXupVVedHGoUi/LcCoWCjlOCyWzklSqlLd6XWKUVOIvZpGM/eqzv4p6g RkHzLGWQO5AkCR2qSMgUlGaLqOcOLL+4O0ireAWtB/tsAI3L8bca68GOLlrZ6lhpdXVNT7fT UeOoWSIv7gCXhzlKqzEHRcdb3T01MSpHOl3UFlL9Va83d3yQ02l+Q6K75j2ti2KT4eyilaNK LDoxOZGNKVCd69Et8P3TV4Q7Q3/sLSgvP9ew7dQtGfzCht7P5Wk5nGY4nYrPqR6oL19Zn8cK Pk7XsmYw0b69zoEcxVmhfEVjiVur9ZYFMl6isPvCrpDXzBq0ClG0GDiTTRQLmqKrL/TmttcF S1bua66EyLS7YX5wL+ndtWcoEl4ac9XsOrQSIlDd9BnyMMT2euzAovvhL7Tm1HMY6+csXH0p RRtOS4k2v5XFcgoVrrwWVwfdMZcGysWprPLoRIkQQ2WtZDvn8+Y/ASkvn3nbwcyUFGfFcSi6 FAzYOGuSXahA40OQOtvD7rKh9e1Ct/wQxGKFZmImmLuF2WDetGaoSlqVsCkZq5KTAzWnJAps 9RZnkd9Yu/u2ZHrPTPO8SH6+rbysKBPJc+tXleY0+eUoBZrD36WjmAHLw3Ys1N3RPLfRBXnQ Jolj3S6X0Z1H5Vi14/iSY7SU02rNBpjXOqGglJV26uSknP2Azr7xCX3nlSXZd0CLH5r9nhYc +S5nQE/QCr0dtnINRPpvcyo5gmceEclKo34AzoFlzQGHI9eqUllzPyyemTt5JYPmzsBMp6vS hwgiM9MqbP+imRqLqophphslni12FxUZa6qKy6vl4Usqurw1/IFknV1Or01mHpPF5Lcxr85N +dzO+fiZn+0MZ/TwkUKw58HsjTit0DlDLhdoJP17bVHHrra8OPJ8LM8wLG/QekuDDu7bYExe i9nzcXo58/6yi5MRXvZytAFWGk/ghKGwrZx8dk5LmZWE/xesJBO2ZNFK0pkwTmIx1sRRtK4l a/6ZO2/LLhXu7IMw4fgi+3/74y3berbFZsdD/xZ87Wrs4UXjSTRFIoUJs+jzLvOtxlbDh0Od w1b4uN42IXRaam2rKAS3gokRzrd6WVNCE6ttjXU4ZtdtduFCrIL1Hp2ABFKIlcBtmgBAhY1q R++nvdZiHxBY4AI+rimrlaxLMM95BnobLt9MUI6CAM9QXFOyc0Ob7BcyjToFPsTQJdWxHahx RqVP4SqD02iyayncp21esztRvSJuI40ta3ZVNK6qsCxwGM5Sm9RRs/PQivTgXKOr0lrTurCR vAoshJR972M+KLi8ia6ov6MuP9DQX+pvysFm/C/cpUrs4kV3KVBss9kDlIbEtLiR1GpyTael 8rZcu4ayaYsDSk+41dOhWuhKYWHJtwNuwex9ED/5LPR+71OomjysZPaA/c04X4YurVnsehdo s2ndnhpZh8QpmPXUD+dU5q4Ua9r/ocryGvvB1y6DvPYV0JL87Ll/oZ7kd35uSYVZdBbCQFpy 5MSB451/NbTlvTmvTJzMFufyo0CJPfvwOTx8Jl9xJPr3fWHths/159srV2a2BvK/biruqqje 1JnI1YvFyypqNspbxEjbl26+dF28sP+ynrYv3XRwXTzaf9mqku64K9y6aWi0oqS7whVu23TB XvCuH6RvI1+GueVDtXPr4pzIW1bOq8vUZRa12YIK67CZLy/zUkzR6UCbWW3xUHp7q74rcS6F NeRAmbh87heYp5Xg/OfK84zhY0rqTPISaastFZOECqKNGaocfIrIFERgDppGKIg6tkmOxyGV Cc6W02UrG4u9WuLKyltuu35Xvd4TtqW7Z/wZ9QfIYMAuxrzt9fmlK/d1hZeWOqohg3mopbmk b8fwBXLVCHqUc8sIJp31lELMKYxIdTzHFkYwlsUKdYVgK4UVmQrSFmExkg616qTCHMpUfNrb VvWBZOpEaeC8MjDzfEdeXrNFJGg0+5jCes7XWPhg8ZPSRlRMEm9l3uuYwZ/hDZDGaJhMorhk W73bFG3bccOqxYlixUAjFOVLmjJpYvrojBbx5kwe42uvDRWu2Ncav/nQTYNNcnaopVB2WNY/ OLwjeN7GudyQ+DNoNIbtWlyFhwTBqXdgTgc/jlsknRRp0zuEkDOoMPtazbMxDPmk6IQQywb7 pzH+E7ovrn7+nrcXYWQwarVSaTC7jL6BFUuEroVZTtb7eM11bT1Bwe8yKxTk3ZTZ5bHrGZap 2n5Tb3robKfzYF5HwkczKoVC9s6q6UniHdBAC/b4Qg08C055CtKhUqimw2IV/GJ+balkb34p 5KGLaIkmafYlqc1zOoTl6/IJnsyPvibZP/6pi6Bf/K5CyvmfXGvhUxz5BQU1+4ZoYboEmTaV fUcha/QdBadV8d6ixsKCpkJLWffarrL4tltXRXsbi9RKhlBkvsvjiy+viXeVWku71nSVla6/ qiewpLqA48hdrNcjGixGazjuCpXl51X11rVctLJYI9p5pcArRbkYtLvt9ki1N78snJ/olRr2 9BbyepFjZU3vmX6XeI56HGvGrltka3nlBeF4uEGpqlfVx1XhcFHcHDdjRQ1L4/XVyoI3VWFv +VLtB5J31nuBCiZLTiTkh/4nZKVmH23LL97Qt36gDD+Hs2cs0U/+/WcXs9U3MVt9Z+p14jlC wXIa1dtbKEW4yB5yikqlCupqRunJj5orllfYCZomtxzgeAVvUF8axjljJl+h8fDbWpY8pDKJ osCmWVOpEIuqWBWnVbtdFobRcApLrLOcd3o8GvyM2qDJ9YinGF5FUSqeOSWCHi+ASPlr8lmo sEcX6dHHWbDi6pJif47VgnGWnGKrv7pEBXWwq7XgA0nXSc8990LODnLTCbmcEzIuznwO58zL 4WY9W/m8FyiK2UJ4tq0AZ/VOk9GupQmvrnntUKJpbcKqYoayyRpoZFCh4DK13YZ2fZf8QgU1 W0GblPzC8VFfuxTKrR8o8zb7idKZdTz1I1uF01WcY6zZdXs/ftNMM2joEsi4HgANFWMrFmcS XvyalF4MHSfcGIZ58A8lThIjrT61vVWddVIJ9OLk5KTu1cxCVS0+nE2mIFrNvgoJzC4xgwmM JGsn5AMKKnftnmu6Gb3VI7oDJhV+FY4r9W6bzQN+fhddtamvPUhyJr/N4hIY8iGoEHb/6tWf nMfxDEEpNSyZ5ARGLX83jFGrpmy8YuDh1MRnVGqGJGkVzPNmyP+/B/Nsx65cPM8I/rWjLp9B X3Qc/wgyzyr8qqP6Sr2v4TihhYkX4FOSXvItaS1rLaw2kNYgVKHqjsXvjuSngdknW1ld6P7+ GYu1UkbiMxsL1TP7tmiepujv0WRg9e5LlzImu89k85tUjelXaJ0t6HCErPx6UJrBa7PJwbGF wpMUq3eZIeNQ4m104ZoVnR6CN/lskPbT5EOcWblAhcRtU0Pg8qiMOleqBAWvVSF1WlQq4ndK taxcXjllVyqXPvHdFzfOKBfDp18GK7obtBtdXBE/i/lBi1aMI7ySGsdyeAtUaPBrzj1OaKC7 mvBLGsmc35rD612t+g7FjJ4SWduKoq+E6s2JmWjAf2xnWaeG2W8f4rNfPpx592Y2zL5wIyIT ClIMuh0evYK8I/2WQm3JdTlzBJLFP/O0gjAE4AiY2M24RsGLXjvUyqQa/016qcbA0/KXQvHz 0vcwnIKieb0GfxZ/ENopUsEy6cN4N4CkWIMGLM4EGZi8soqw7Yuep/qNhrzjhA6My4dPHbFY 5MfQshoMha1+pdHZamzXdC1Sw0QiOvfYlP/YfnNWNTt7wwJ7imVtSCQfoGjvsu3Xb0hPKfS2 XKvdrye4v9xOEAz4XbtbYPBRonZz3xI3wZly7BEX+SBnZlc/99M/XJ6+TwnuleaNGjxBDvFG hsuYiIad8q08+vQ3N8rJAw9zH00/TBymr8dyscjTmBG/OsXSjuP4CZixGT9zlPZqrwrN6CRc J3/98tSk7jW4u7iClSM0hN+ZCA0+04YecoiikXh0953rCxi1SQN32GUVrIKKyI3kbbh3lFKb PGazQ0tveih9PP1i+tUrykb3jcZ4gaMJhZIewck7LsdFPB+vewTSHbhbOrDaX8AoxbNG+cPM KD+EUV6lnRtltG5ulGS5LfMl5OCMbYl6k5FFgTAQKHXPDpJQu6x6q6AkcgvzNt4zSqNBatIv P4g34xW4Tx7k3lJOALuilYrh9NQXLk+/kz6V/u6jiswgZf+DfvDuhULc8M8J+XeE2r5Q6C+d uzDGT5D7//Wiov6BvP7PCyctFH7i40V9yULRDH460X7//+T/5NOLLv3pRd+PYYbBcxPjIwvF dOr/sW83IVGEYRzA/8+smVqolVGK2diHmeKWEl2KyDTLZC22L5C+xt1xd2p3Z5sdraCvQ0RR h+jYLehiUKcKo0sfUIeCOgSBp7oEFR2KvohqemYcwzJlhb6IZ+E37zPPvvPu6/vM6+xlszNt 9b9ten92ykqG+DI25XNGcOnnKjqAmYdHpm4Zm8pzA2a9A2Z/+N7czuxUnf9z5t3LXjWvV83k 4Wqr+Bv6LCGEEOI/w9/56lJCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhPgdoIC8H26X IOBGSgVylQLvl9z41a/AwcChMV6SwyZjOsq5nccW+Plm1uZFHdiGKOIc2cMvJ4WKqJjKqIKq aR110FYyOGtSN/XQATpOJ+gknaIzdJmu0w26TXcgryGrT6q31ssxjisxH41o4rOVWIVWhLAW YazHBmzEZmiIcBV0dCHGtTCwEwmkYCINCxmuTDf2YJ/j8GjVo47SOWyUpDfKbn+UHux1nMAm 55Zz33noPHIeO0+d984n5GECijEFM3AWF3AFV3ETz/Aab+BQgPKokEr5LphBVbSc1lD7L7u5 A4DzatQehbg40I9f0cFrMJ7/kui3WTSg348DmEoT/TiH40o/zuV4sR+PxxJqc3drTr47Jh31 Y0I5PfdjBYVKrh8HUKOU+HEOx8v8OJfjuB/zfJTT6IXKc1mIej6qXBuDq2rx+mdYF6+/ypUz OZP2jhpnDI5SCPI7jVyrBLdhzrnVs/kq90znVufePXyMcs8mvi7BfTo5Z3APw+unMdsb061/ klsLuzjnfq77TpyzP59RzDvv5jkN9o5wm+RzjWdmeJ8f7FUbFtY3qCEjYpkZs8tWm0wrbVqa bZipoNqYSKhhIxa3M2pYz+hWjx4NhtpbQiuaa5u0hNFpGXWtNgeR7JP+mWpkVE21LS2qJzVr l2p2qXZcHzKPmGV2p910xEymtZShZ4J/pAohtKOFjyt4J9b+UBO3d4xXNOFVYbSedbyDbT8T +S09/8rdMvDwK0rwf79iPOG9oXC7ADuA/JeTFN5D5O3EcX3h5gdHCrcXLX2L0jxva157sf+e 297t7zv2cdHnuwUlee6TK3/wKftVgAEAX40HIQ0KZW5kc3RyZWFtDWVuZG9iag0xIDAgb2Jq DTw8L0NvbnRlbnRzIDIgMCBSL0Nyb3BCb3hbMCAwIDYxMiA3OTJdL01lZGlhQm94WzAgMCA2 MTIgNzkyXS9QYXJlbnQgMjcgMCBSL1Jlc291cmNlcyAxOCAwIFIvUm90YXRlIDkwL1R5cGUv UGFnZT4+DWVuZG9iag0yIDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMjUx MT4+c3RyZWFtDQpo3oxZWXPcuBF+n1+B2idyy4QJgOdWkirbUlxylTdKNBs/yPvAITEarDnk iORI62ztn0j8g9ONg8fosKwyxQNo9PH11w3odsWIIqs4TYhISBBHIUl5SDq5EvrNfvXpR9Ks 4G3OaShIwjgJ4B5HfIIPr9/1CSl7wvRPX8Kb91eM3PR2/kzgdvXP8ePb9er1es1hynoLwnFp +B+SjFMBb3lMM07We/h0s6JhGMJDCQ/r+5Un3l9e+uvfcD4z8zllKUth9voMx5Srv8AM8Tcz xq5BOc+EGRKMAr2tairV3Py0lCdomLrBz8gTM3mwPIy79uSdn1Hhyc4PEhp5X/1f1x8WmnLx AslmgLdvN6qWp7ZmoZPwvFrXXnE41Kr0U5p7hc9CmnqDH3qqbU60imiUPSMzYIKKJElJwCgf HZhoB+6KfqkfoyKPv2tgYqMFei1m0yh93jg3UasgtArHRt0eH3qJv9jP196bFzsqzl7m/Jl+ F2eo2/napMq7KxiAP1fvfgbVPsDM3+D/PWEh+Uiuf4UvlUnJW3iNA2HtSNAY1kg4Kff63X4l shSiBrf16moaGFOIS5CH+GkcGpIkSmmWLYbmgkZo//OjIB3T6Luj8oxGyXdHBTzLaZKRhW6P moHTE5ol3xmGbwJcSETfWVpkCTrwCQ2BlgwdZY6OAAI5yDa/4DGOKPg+zSjLkJQwthHGFqLM kJOuvY86VcllXQzbttv7ARdJKGjmvWv3e9kMvUZSQAX8wzwSPM0RJygqnbjtTVN1raocmEOj EKybO+CP3IWkw83idhbxGbM5XwwA3p74nCGkO0lk34MWqqjrrzAMqelDcVeQabTWj4c0jtiI YBbbBUDUsDuCvCCGmWW7h1SJvQNYCb/qr36QeeReDTsYgD7zhp10t3oZuMcld0p2RVfuYMWa GIfYFZFZQs6dgZl1bhjlVoFiD7zKPOUHcG1uSNk2d2gQpCjkhkfhfeIRXy950ZBCqxq71fH2 YELjxzDCCCM+vpd3sgMLAF/2RaE1YxmNscxZhnB+8tEBLdgDUszSdtHP3qEovxQ38rNPgBSJ Gnojrr1vrAaGqMxbZ5D0uWdd4VY88YUtLPfgtZ0VpKzoL80kfGgJen2yMkMrnXbFdpAdUU0/ FDV8E565AtlhtJR+sGzHcgosm01oy4wC1Ir6e9sR+btV/1DLV3rduT2vVYWh0a4a9PWrcZiV 0G71FG3ClRwGKMC984FdfOaDiUkRkVFqADGDOUF3GLD9T0MT0cCAwwuTFrTXaxjjgPXSOJqM YzqVIFkt0m/6b5ScA7Qgd0SEIhtY5E5+g+cIoTPPLyMSKDJjk0jmdA1hHS3Tmq0aY7LLVkxL 1ZT1sZLVOATCaBMjoTxOslM0JDb1MSooWwPcIq8nYLFZw2Qr0gFxqIMHPRgjhYVOQuwzF6vB scLQtlQrEAJf05Cz3MXAeX6tcxsX+eXcJTYCsXdAhO/FLF04pAv0D17jsvPMRQtwYBKurido cs9cjXrOMacCQTeGrORyr5dOKQ1NtA+gSQAcqE6nbnbDZx/mIjZsSbdkH1hyBT8nKTTBi/7Q kPLbGvz7VnZAE0/zcjCiSTvL+Go2M8C2kCzZ2ZgGMDh0CpXm8KCWBG25C8RMycnFSSnAFXML CI0DcDCDQBQDOQ6qVv+R2g3g4aYquop84B/PreQ3lxcuiBo8UxZycYo9YYjgXxcf/2sm96B4 C7rLoei+Ep3pju7ZXDIQEjn2kOakkneqlEF/kKXaqtLM2cpiOHYOvgZExRcX0KK6K5oBzLLP jj1Q0/WPL/T7wdVldDIwWcAj6JEQy52E9/KVYwcuYkf5RBYj4z4XSBvHnWMDkbJkCtDIBrkt ZYVLFKwQNjltAhvHTRlpiCCmSZgkDyjx1GZJbyikkXbOaCoxjIhGIyfGngOafdyonpa1ggW/ PZL2I/tb5nHpbxIfjTaJP7J5cVImsT42Fs467/XrrWEmyHo9aUz9yDNXrCGVnVU8XXh7nz+X zXmYskUN1b6yWaIud20jyWdP/eMKiMF1+U/0W2P1iYWZfm6QwZGiFpXI0HlPxpbHsa+2fD4U dgU2obWiDzmEud7n1Zigbsla9QNBN5ogaLjU0gQWe02bSPrjAQAOIG9K2b9yajiBZVvJKeW1 Ho+lvHacRVmvbhqdra9cgBrdPEFx7+TtUXVjLUN1Ek3jsVcpx2QF9KFWQUSN/F2Wx6HY1BZA kBOy3j4BxdPa92IozkvQy6A4VSHbC+YimnUN8egWmxWP1Slm6hR/tk5lj9epRHe0Y8e03smp SdSqzOIUjgyTnPRGPmxbjBKp1xiuNdVfeLIHzpEjsnAGwrbuW2L5e2zWnQuinJ12hTonbDSw p3/QprsNg2vWybzZ1t96ZafURUew+9FvH2wgnPFaiUe7w3DaKaTWvCfZAcAgYO9nGzYHKw1x 75NqKkTSx8XhyxPMMHrBsbBlBu3VpSTj/xM+s1GBDhYSA1ILsscaCwkZRXwqJMxVeuZa1QW1 QCGujuVANLQ1SXz2GM82atBbAeBKGATQSiD2CC0oDaaR05pe2tlGlunQEqPXSA9amyf2aSMI Rmq5qdsNpJXp/slC1dnuYGt+SbMrAzp+/8vFGWygwAQE6bGXI49paJgmGeY7F+kwhvNABkgZ sdFmUFswmIECRWPcsszQxNOc7XQeTAkHqZjhyy2CTnbreGm71Vo+SHsMqKnaGU1EvmihrjVv 0zGl3S7urqjBN53m70hvyQQSkWnZCvN2zIai7Nq+H9uPsSkUM4XTEZS2XNn9HXBg5HjgeKiK QfaUvDnFgIk+07HXTFV20J9J15ltdPrCtvffqj+O23irwjIxWWy3DFfDsVIt2Rwdwqpjh93g LMvnYRGas0DT/rjBPayC1ADHAsShiD2sYo28d5g/PINjs85kjFl2KpTgctnpT7azfLT+mR3a eMhhilyhi1yjthLqso7pVif8fLc7J+XckDKo/nile7iFPDcb7gSrxU/Ehuri7K8//CE3LEu2 CQI98oI08xFCeCyzCSK4zysO1yCHi0grvMVLUcRVWG5SuM0y/PbnD1qR8/XqFo/GQmpPEfH8 g8chHgImsCNNSblfvb7YM3LWjqdm4yE+tM/61EyYU7M4TmBLBW0v5/rcb71Hk9J4ztbrAtCU ehu4YktX69/Clt3FAX/kmuqnj3Oj0G6MPHZyqhyHSfTcqW16mu7X3rbzGXb60D4vdQESSdx2 /2ldWJY/+GPDFT9RK0/i5V8tRMpPBAncd0+C9Kmjx1jMs8ieKuuAxXi8GeTgcBgcCdiEJBCw iKbcRoybiOFgBoEUJr4hDo+Ba3lG4izHMJvhwgz/vwADAFrJZw8NCmVuZHN0cmVhbQ1lbmRv YmoNMyAwIG9iag08PC9CaXRzUGVyQ29tcG9uZW50IDgvQ29sb3JTcGFjZSA1MiAwIFIvRmls dGVyL0RDVERlY29kZS9IZWlnaHQgMjc2L0xlbmd0aCA5MjY3L1N1YnR5cGUvSW1hZ2UvVHlw ZS9YT2JqZWN0L1dpZHRoIDE4NT4+c3RyZWFtDQr/2P/uAA5BZG9iZQBkgAAAAAH/2wCEAAwI CAgJCAwJCQwRCwoLERUPDAwPFRgTExUTExgXEhQUFBQSFxcbHB4cGxckJCcnJCQ1MzMzNTs7 Ozs7Ozs7OzsBDQsLDQ4NEA4OEBQODw4UFBARERAUHRQUFRQUHSUaFxcXFxolICMeHh4jICgo JSUoKDIyMDIyOzs7Ozs7Ozs7O//AABEIARQAuQMBIgACEQEDEQH/xAE/AAABBQEBAQEBAQAA AAAAAAADAAECBAUGBwgJCgsBAAEFAQEBAQEBAAAAAAAAAAEAAgMEBQYHCAkKCxAAAQQBAwIE AgUHBggFAwwzAQACEQMEIRIxBUFRYRMicYEyBhSRobFCIyQVUsFiMzRygtFDByWSU/Dh8WNz NRaisoMmRJNUZEXCo3Q2F9JV4mXys4TD03Xj80YnlKSFtJXE1OT0pbXF1eX1VmZ2hpamtsbW 5vY3R1dnd4eXp7fH1+f3EQACAgECBAQDBAUGBwcGBTUBAAIRAyExEgRBUWFxIhMFMoGRFKGx QiPBUtHwMyRi4XKCkkNTFWNzNPElBhaisoMHJjXC0kSTVKMXZEVVNnRl4vKzhMPTdePzRpSk hbSVxNTk9KW1xdXl9VZmdoaWprbG1ub2JzdHV2d3h5ent8f/2gAMAwEAAhEDEQA/APTnZEOI 8DCb7T5qpcWeq+bWA7joXCRr8VCa/wDTV/54/vSU3ftPml9pVKa/9NX/AJ4/vSmv/TV/54/v SU3vtKX2nzVHcz/TV/54/vSmv/TV/wCeP70lN77Sl9p81Rmv/TV/54/vSmv/AE1f+eP70lN7 7Sm+0+apTX/pq/8APH96U1/6av8Azh/ekpvfafNN9p81Smv/AE1f+eP70pr/ANNX/nj+9JTR 6t1bPHVq8HGyDjVnH9V1gYx4B3OHv3g6adkLD6/bi9Qox+o5otry2xSXMY2bJiG+mO/mqX1y 6TZ1Hpu7A9K3PY9gb+ka0msGXNmVzOP9Wus/b8a52O2ptWVXYXOuYQ2ppBd+cUlN7qP1769V 1LJoqyGtZXc6tjPTYYAMDUhbP1Z+snV8vOZX1C9r63tsLmbGt2muDMtCxruiZbLMt1eA22+8 ZAN/q1w5z7d9TxLtIaj/AFa6V1Wjq7bs2tlOOG27nOtYZ9QNAENd5JKbn/jh5WR1B+Lg01PZ uLaS7cXPgxPtW70D6w29UZkNvY2u7FeGP2TtMie65E/4vTX1K3MxepVV1vcXVVkwWSZgFrgt /wCr3RB0dmQbMyu+3KeHvduECBGklN14tzVeFfxQ6mL9ZsDKvuqrcQyh3puudAYXzt2t78qn /wA+em/ZsvK9O30cN4re6G+5xdsho3ePiqGF9WK8LLtyKM6qHEljHBpgOdvdu19x8D2SP1cc cnJy/tmL6t9YqYzYz09u7fNjJ9zvNOS7WX9ZcfE6bT1Cyq1zb3NYylgBsLn8DmPxQKfrp0q6 3HqY54+1UPya3FsDbWSHNP8AK0WfZ9WsWzo+N0p+Yw10XNue7cPdBLi0QdBqodS+quFmXVPo yq8WuittVdbC3RrXFzu/5wMJKej6L1rG6xhV5uNuFNs7Q8Q7QxwrfrrI+r/T6um49eGy9loa 5xbBE+4zEAq5LP8ASM/zgkp5bJqouzupWXWmptNz9dIkvdzKC7BfWCbLmANrda866Bsf3rA6 79Zum09Y6jjPssBblXMsaGmCW2OCpn639OLdpvuLduyC0/RPZJT1T8JzWyLmkxO2DP0Q+PuK Ld04NyGU1W6Gt1j3P4AaQ3834rkD9b+nE/z93+afCPyJx9cOng7hfdukmdp78/ekp6W7HdTQ bnWNMEe0TwSQDPHZV/VWH/zx6f6Dsc22OqeQ6CwmCPBD/wCdPSP37P8AMKSnoPVS9Vc//wA6 ekfv2f5hS/509I/fs/zCkp6D1UvVXP8A/OnpH79n+YUv+dPSP37P8wpKeg9VL1Vz/wDzp6R+ /Z/mFL/nT0j9+z/MKSnoPVS9Zc//AM6ekfv2f5hS/wCdPSP37P8AMKSnoPWS9Vc//wA6ekfv 2f5hS/509I/fs/zCkp6D1UvVXP8A/OnpH79n+YUv+dPSP37P8wpKeg9VL1Vz/wDzp6R+/Z/m FL/nT0j9+z/MKSnoPVS9Vc//AM6ukfv2f5hS/wCdPSP37P8AMKSnsPq/ZPV8YeLj+QonqLC+ qX1h6blfWLCx6nPNljyGgtIH0XHlF/b/AE795/8AmlJTxP1oj/nN1f8A8PZP/n16zfb4FaX1 o/8AFN1b/wAPZP8A59es99F1YDrK3MaeC5pAP3pKY/o/Ap5r8D96ikkplNXg770pq8HfeopJ KZzT4O+9NNP7rvvUUklMpp/dd96U0/uu+9RSSUymn9133pTT+6771FJJTKaf3XfelNP7rvvU UklMpp/dd96U0/uu+9RSSUzmnwd96aavB33qKSSmU1eDvvSmvwP3qKSSl/Z2BS9vgUySSnoP qDH/ADw6Z/xh/wCocrOiH/i8xrrPrTg5DGzVRbFhngvY/arH2a/938UlOl0PBxL/AK6/WDMy KhkOwsrIfTSfznG5/iukHV+mfWNj+l24TjUayL3PaG+i/gNnx+C886h1nM6L9c+q5mJDic3J bZW7h7fVforuf/jGyb8V9OBh/ZbrQQ+5zg6J0JaABr8UlPLvpbXmux53NZca58QHbV1XVuh9 Ox5FmIMP9bppxHB5d69bj+lkSY26LkGEsc1/LmuDte5BnVatn1jy7XXG2quwXXsymNM/orWd 69dNw0KSm91Po7bOuU9LxsWqhtl5raabPUcWNOpeJMaKxd0LBx+uNccV46fdiW5NOPbLTuqa Q5rjz9Jqy7frDOVbmY2DTi5V7XtfbW6wmbPpOG5xgpsH6x5eJSym2pmY2s2FvrFxO25ux7Nz SDGkpKW6jjYdvS8bquJV9m9Wx9NtAJc3c3Xc0nXupYdGDi9G/amXR9rsuvNFNRcWsAa0Oc52 3Xvoh29Sx8/0sfKH2DBxwfRpxWbwHHkne6ST4ynq6rj4ddmDXU3qPTrHCwV5TSxwsAjc303S PvSUne3peH07H6hbhC92e95ZSXkNrrYdsAjUkrRP1c6XGbQ0ubZaKXdOe4/RNzPUFbvGeFjU 9cDKTjX4NGTitsNtFNm+Ki7kMc1wO0+BUMnrmdlC/wBUt35FjLS9o2lhrEMawDQAJKdfA6f0 6rq3T+n5WGLfteO1925zg5rw1xdEeJCbonRsbrDsy/7I5lR/V8ZlW5wbaQSHE+Giz7vrLm39 Wx+rWV1/aMasVBoBDXQ0t3O15MqsOr5jMajGod6Dcex1oNZILnuO6Xa9klN37Ng9K6VjZOZi /a8rNfaAx7i1tbKXbD9H84lFa/pDuguzT05jbPtAo3B7jDSJ3c8hAs+sj8gWV5mFj5VL7HXV 1v3j0nv+nscxwMO5IVH9o2DBdgitgpdeMjvMgRt+CSnS+sGFi0VNs6fjM+wlwFOdW8vLxH0b B+a5Ya0MvrHrYZwsfEpwsd7xba2red7miGzvc6I8lnpKUkkkkpSSSSSlJJJJKey/xZf8qj/w xV/1Fisqt/izI/awHc5FX/UWKxI8klPMfWj/AMU3V/8Aw9k/+fXrMXXdf+rWRkdW6pk12zdb nX+nTGkG1xEn5q9f/i4waDXj2dcbj5z2Ne+m1ntG7wIKfLFONXE+oWFkMsJ8XDK+E0Xg4KUH wXY5X+LXr9LtuPl4+QSJaA8tJHwKwf2dfRdfjZz7Kr6LWUlrId7nzqfLRMXuZB8EoPgVpN6b lOftbaTAkmTBgwQCnf0zKBlt+1jnllYc73QCWz+CSnMg+CUHwRH22teWi1zg0xuBOqb17v8A SO+9JTCD4JQfBT9e7/SO+9L17v8ASO+9JTCD4JQfBT9e7/SO+9L17v8ASO+9JTCD4JQfBT9e 7/SO+9L17v8ASO+9JTCD4JQfBT9e7/SO+9L17v8ASO+9JTCD4JQfBT9a7/SO+9L1rv33fekp hB8EoKl6tv77vvS9Wz98/ekpjBST+o/94pbneJSU7/1AJH1w6YJ0Npkf2Hqxqq/1BJP1w6Zr /hD/ANQ5WZKSnpeqz+1czIpMtORa2xn8pljmyPPRbtNdmU2n7S1r7nAbi9swInkjsFxI6uKf rL1nBt1Ds7JdUD4+q+Wrf6f9YDh4lpyA6zDewmxrdXNI5V+YllxxyR14I0R5OdjkMOWePIK4 53GXcHZ33Por+05pAFVILgfJoXjpyM/NyczNps2/aLtQTyTuI17bWhdl9Yfrl0e/6vXY3Tbn Ovvhm1wghp5XB42Y/HqNbQCdwe0nUcFrgR4EFUHRbNdPVWtAreNp8HDQCdfgh5Deo47W+q/Q vkEODocRu+UzKj+0sgN2tDGiNujfzdfb8BKi7Ovd9INOodqO4aGA/cElMz0vNjftEESDuGsi dE7ulZLaRYdsyd7dw9oaBz568JWdVzLC0ktG0yIHeCP4qNvUsm2s1u2gO1cQIJJjU+eiSlfs 3KgnaCYEAEHUkN2+R1TW9PursrqBa99jC/QjaACQdfkn/aeX+aWt4JIHJBB3Hz0U6+pu9Ztl tdZDWlrWtbHM6feUlLO6VlCprwA5xJlgImAQ2R4jVR/ZmXBIDSB3Dhr/AFfFI9Ty94eC0FoL WwOASHQPuSPUskxG1oaZa1ogCRGn3pKVZ0zLqaTa3YdhsaD3AMOHxCqq07qNtjnvsANj2Gvc NOeSVVSUpJJJJSkkkklKSSSSUpJJJJT0H1A/8WHTP+Md/wBQ5WFX+oH/AIsOmf8AGO/6hysJ Kc/r9N9/1s6pVjMfZec7J2MrEuJFr+IVjGwfrT1EWYLWW1hrZsFo9ORxG53K9MxvqZiYHUcz rD2jJy7sq3KreJa5jbHF2wCYMSrmcachjd01OBDg7bB+BThOQBAJAO62UIkgkA1tb4l1Dpt/ Tcj7NmsNdsbgBBBHiCCgNra8wwPceYa2T+C9M+tOLSemXucGXnYQ1xaNzTyIK83wcpgxbqXP dS57muFjeTtn2HyMpq5D+g/ed9wTxQI9z9eNB/etH9o4bQCxoLoAbLB7RIlvmpjqWCbGvsBL WV+m2vaIjcSfwSU5cURMvj4D+9SbXU/6HqOjU7Wzp8loftHHALWOive1zaywQABG0+KDVl47 MnIducMe3gR7jGo1EQkppxjjQueD8B/elGP+8/7h/etJ/UcR5e54Lt3LS0SdAGie20qWNmYV l1gtaJuf7AWgNDR9FJTlxj/vP+4f3pRj/vP+4f3rW6hl4rGW07Wuse0bXFonbAA44IhYySmc Y/7z/uH96UY/7z/uH96gkkpnGP8AvP8AuH96UY/7z/uH96gkkpnFH7z/ALh/elFH7z/uH96g kkpnFPi77gm/ReLvuCikkpl+j8T9yb2+JTJJKeh+oMf88Omf8Yf+ocrGirfUD/xYdM/4x3/U OVhJT6LndQdc1tzbdjqcrJpLZj+aue0H7gtG/qctb6bq7GFoM7XET39zV5xn/XA4HWepYV2M Lq6s7K2OHMG55TD654TtWNsoPkP7lTnzOeEyPu8pRB+aMgdPJsRwY5Rv3QJdi9H9cMmurCGU GtEsJcBoCfmvNOn/AGc4733BvutG/dwAWuLZjtu5Wx9Y/rKep4LcVrjYQZ3wQQPNc1td4H7l YxyM7nRjegEt2PJHgqNg9SQ6Y/ZjWAv9IuAOjZ+nB5/k8QhZIwbQPRNdRa8aidW7Wk/9KVR2 O/dP3JbH/un7lIxutZ+x2hrW+m4u0e4ToNp1HEGYTX29NbiljBW7aXGpondBDQC7+VysrY/9 0/ckGPP5p+5JTqT0prYJZDto9kzt3N5/lRKd1eLkZNLWupLa63AsbO2ZcQeFlbH/ALp+5ICx p0DgfEApKdJ56X6tTGCsyXmx5nbuA9g/qypbulNO9u3eDtIExxq4eU6LL2P/AHT9yWx/7p+4 pKdmt/SfSZW/0yzcXMbJBJ2AfpCQe8qvW7pxsY3ZW1ha7e5xJ2mdP60LO2P/AHT9yWx/7p+5 JTex2YTWRY+p7t/vcZ+iR7dunj9JG39KaQNtZOrnkSQCIIDfLlZex/7p+5LY/wDdP3JKdf8A yS42PtdUXPeSwNkAeA0HChuwnta1/oNLai3cz814J1DY90rL2O/dP3JbHfun7klJ88NGU4Ng aN3Acbo1VdPtf4H7iltd4H7klLJJ9p8Cmg+CSnoPqB/4sOmf8Y7/AKhysKv9QJ/54dM/4x3/ AFDlY1SU0frDiXXfWTq7gdrPt2T7j/xr0sLold9bzZa4Hhkaa+ML02npf1YqsyeqdQYHW3Z2 UwmyXNDm32DQD4I/Wcb6uZGNSX1DbaS2q6gbS0hRcOScjGMhxdIDd0IZ+RwwiZ4ZTjVTyzOl +A8HyXq3Q8/pW03EkO4jw8VXwsV2VW5xu9MtsYz3GAQ+Z+ei7D6z9F6pTjHJ3/a8VjDssOjg B2cFxWHTfkUufW7aN7QBwC4Aun+yFIOKyJCuHRrZseGMMc8WQZPcBJrp2TOwbt7ovgNJ3TOj ROvnwp/svJLy1mSCGk7naiIaH9/IqIxM97RFgc0yfpcAz7j5FQyKs7Ghz7Jl0S10+7aIn+zC LA17HWsscw2E7dJB0KgLbYA3u+9XHdKzCN7tvuEiTBOkwPuTu6Tc2j1C5m5pcHtn6O0Dnz1S U0zbbP8AOOHzS9a3T3u+9Wv2XkkEwCREAGfcSG7T56p39O2W11mwOL63WS3UDbOn4JKafq26 e9x+af1bZ/nHferJ6XlBrH7RFhaGme7iQPyJO6XktG52wACXGdGiJ9ySmr61vPqOnwlI3W/6 R33q+7o2SbA2kttDgDIPEtDvd96Eem3D6Za1+1zmtmSdnKSmqbbdfe7TzTi22fpu+9RSSUyN tv75+9MbbON7o8ZTJQElL+rZ++fvS9SzX3nTzTJJKZb3+JTbneKSSSnoPqAT/wA8Omf8Y7/q HKzJVb6gf+LDpn/GO/6hysJKejy+tdO+y9U6dfcwZVHV8tza3GDtda8yFtdJbgdQ6XTU+9s0 vLmbXCZK82+tHTM/9u9Vy/s1px3ZuTFgaSP51/gsZthqPte+tw8DCjji4c4zxkYyEeGgySnx YThlG43er679b3V4f1bvDnbmBpaD4lwgcLyXFyrMak1sAncHtJ1gwWmR3BBRLM/Kup9C7Jus pmfTc6RPzQmVCwOLGvcGCXkCYHmpSSSSerEAAABsEn7RytuwFrRqPa0DQ/m/DVROdkkySDru 1aDqAGz9wQ2tqd9EPPwTltTY3bxPEwEEpn9UzHkFzh7TIhoGsEfxTWdRy7azW9w2n6UNAJJj Unx0Qf1fxf8Agl+r+L/wSUmPUswge8NiNQ0CSCDJ89En9RyXODvY0tEN2sAgeX3oP6v4v/BL 9X8X/gkps/tfOkHc0xwCwRIM7vioDqOUN0ua4P0c1zQQdI1CD+r+L/wS/V/F/wCCSkzepZbS SHD3fSbtEGBtgj4BRZm2NduIBIY6tnYNDuUP9X8X/gl+r+L/AMElMElP9X8X/gl+r+L/AMEl MElP9B4v/BL9B4u/BJTBJT/Q/wAr8Ev0X8r8ElMElKK/P8E3t80lO/8AUD/xYdM/4x3/AFDl YVf6gx/zw6Z/xjv+ocrOiSn0Kz63/VgZObgZWQMe5t9uO9pBB3Ne5hIPmdVSb076n10uxn3V ZDnEunILXP17SYK5Q5f1Sx/rF11vX8ay+12ff6NjeGtFr/DuqXUcfomZnXC+51Asc37I+YG0 /vJpNSj4tjFj48OY8RHtiMuHvrTT+uWB0zpnU214Dwa7W7yxp3BvwKz8HKorqsbdL6nwfTA5 IBg7uy7Rv1U+r/TqLWim3q+UyttgcT7HB3AYRouatZ0+m69jaTjVi1u+m73Fg2u28ct3p5Fb te7Yu6xV6hdXNbfYQGCPomdp1UP2rUDI3OJ5cQJINhefwKYW9NawF/pueAdGtP04Op044hCy X4N0Cstq2uBkNOrdrZ/6UoKb+RmY1VVY3fonNILGgTqPzSOFhdp7eK1rLekNDWtDHTo9208Q dRoNZhK/J6cMYsr2Ojcam7TIkNA3T+doUlOSlBGp78LU9XpQbB2kOgENBB27mmD/AColK23C fk0OL6nMrZse0BwbqSZHt7JKctJawyOl1mn0gyRuDrHAzJaRq2OJTOysEgF2xxDRDQ0xuDY1 08UlOUktwV4P2X12V1lrjuO4EANBguBg99IWf1D0dlXpEO+lBAj2zpokpppJJJKUkkkkpSSS SSlJJJJKeg+oH/iw6Z/xjv8AqHKwq/1A/wDFh0z/AIx3/UOVhJTlfWgE/WXq/wD4eyf/AD69 VM3I+1trlhBrABPwELU6tj/afrtnY5+jb1K9p+BudK6vO+p3Qupbhitf0y9nta9nvqdH7zeR 8kRiMtQL4Vw5g4hKF0Mo4T408QOtdW/Z7enC1/2et25gEhw8p8FRcLXOLnbnOPJMklbHWPqn 13pMvtq9fHHGRQd7I8+4+ap4OH9rovIc4XsLRU2dDM7p+QSNrWl6b/3T9yXp2fun7lqZPSq6 9z2ZOyrcGs36kzEnT4qH7LsJhtr3EOhwAHtbEh593B7IKc/07P3T9yXp2fuO+4rTd0k1NcbL 3EjdtDRoYBd9KfJJvSXOeW/aXFrJFhDTIIAOgnUapKcz07P3HfcUvTs/cd9yTnuDiA8kAkAp vUf+8fvSUv6dn7jvuKXp2fuO+4pvUf8AvH70vUf+8fvSUy237dkP2c7dYn4JvTs/cd9xTeo/ 94/el6j/AN4/ekpf07P3HfcUvTs/cd9xTeo/94/el6j/AN4/ekpXp2fun7kvTs/dP3Jb3/vH 70t7/wB4/ekpXpv/AHT9yWx/7p+5Le/94pb3eJSUra7wKaD4J9zvFNJ8UlPQfUAH/nh0z/jH f9Q5WFX+oB/7MOmf8Y7/AKhysykp9E6m+o9TsZ9iovc1xc39GDZMnc6W68o12LiVYhyWMdSQ fc1pOnfgqFX1k6JYcnEdm1UZ+NlZNb2vcGO9t1gEOI8Fp9OLMvEHruZa90OdtcCJjyKcZHh9 PpKyUSb79LeatzTTlY7G3fosngOETHIK83zmWZXUc2/FcKWHILWNboOHEnTwaF6N9ehh9Ndh 5T3CoMFuxpk7nlsNAXlVWbdU1wb9JzxYHdw7UH7wdUDORAEunVGOBjd+DYZiZzmjZcC0+4+4 wAOHfgo5LM/HAc68ul8e1x0cQCPwKEc/LLdu+BroABoe2iic3JJJL5kzqBzAbP3BBkdKyrqT sUUuc0AjRxJ3O0JgDxSoqzMSt9vqNc8ki1rnH27Q38dVQf1HNeQXWTtMiABrEfxTWZ+Xaz03 2S08iAJmOfuSUld03JeXPlpcTw394uA2/wDSUbOnlttVTLGuNjC8u/NEEg/kUD1DMIA9SIjg AcEGfjok/qGU8y54kDaIaBofgPNJSQ9KvDtpeyIcS6dBtgmfvSd0u9hcC5pDQSSDP0eQgnNy jIL/AKUzoO4AP5FIZ+UDu3yTOpA/O5jRJSPJpNFxrJ3QAQ7xBEhDRMi919ptcAJgADsAIAQ0 lKSSSSUpJJJJSkkkklKSSSSU9B9QP/Fh0z/jHf8AUOVhV/qB/wCLDpn/ABjv+ocrCSnO+sGO 7J+tvUsesTZb1C9jB5m54W//AONx9cMBosx7mtPhXcWGVn39NzuofXnqAw2y6nqN1j3EwGgX u1JXpnX8m+nJY2zcKrGDa5kHUNOg3afS58kLBNXqFPmfX+j/AFzrxGv61XkXYtBlry4WNbPe QufroNrXPrre9rNXkRA+K9kDs2/6pdTqvY8htLhWHgySWy4DyB4Xj+DlV0Yt1NoIdYWmdodG 2dDu45RUgir916m2oPBLWPIbMnTtqVdf1eq2W2te6sn6MjjcCPwT39Wx7GlrGOktLS4xrLQ2 TqfBJTnTR4O+8J5o8HfghJ4MTGnE+aSkk0eDvwSmjwd+CGkQQAToDqElJJo8HfglNHg78EJO kpJNHg78Epo8HfghkEGCIPgUklJJo8HfglNHg78ENJJTOaPB34JTT4O/BQSSUz/Q+DvwTfov Byikkpl+j803t80ySSnofqDH/PDpkf6R3/UOVjRVvqB/4sOmf8Y7/qHKwkp77onSq8LM6xk2 tm/Pzsh/mKxa/Z/etB9uaytzbqm5FAOgdBMeMFcL1T6+Z+B13qOMaGvrpy762lpg7W2OAVrF /wAZWKYF9VlfjpIWdL71jyTmI2JHprp0bFY5ADie3zMqx+E6t0MY5se3sF47mZOFZn5toa1l X2gSI/NDXNa6O436ldj1L659Nt6Zd9ltmwtIrZGslea7LCSS0knU/NS8qcs5znksacIGy3KI xiIjvbpDJ6c1gLtr3gHhke6Dr8DohZN2FeAGxXtcCC1vLdrZH+dKpenZ+6UvSs/dKuMLq2ZX SgA1jWunR7tvbafxmE12bgfZjXWGuI3GtuyNsho189Csv0bf3D9yXo2/uH7klOkcnpgbBAIO 0ENbHtDmnafPlKzJwH5VFljmvrqYWOaGkCSSQY8lm+jb+4fuS9G39w/ckp0RmYDQ7bWyTvI9 sidw2xP8mVJuR0plT9uryXFntMieyzPRt/cP3Jejb+4fuSU3OoW1W0tewgl1ryzx2QOfmqKl 6Nv7h+5L0bf3D9ySmKSl6Nv7h+5L0bf3D9ySmKSl6Vv7pS9Kz90pKYpKXp2fulL03/ulJTFJ Psf4FNtPgkp6D6gf+LDpn/GO/wCocrCr/UEH/nh0z/jHf9Q5WYKSnUp+puR1X61dSzcwNZ08 dQyWvrsLmPeDY4hzNNRqt7/mP0bpljsjFpORv9hrf79oP5wldJ1LqtbQ2s1+pXY+yt7uI9N7 mGPuT3U4rAAMlzCQCA7XQpKfNfrR9V8QNtzsZ32U1Mk0bYa6O4XJ4tTH41uQ4Pt2OawMYYjd Pud5CF6h9a6x9jdVZYH1WNJFg0gRqvLcHEtNb302mv3+m0gkSILnEx2ACFi66po1bb/ZTRq+ 57WiAdOSY+jrqNVL9kbrG1sseP0cvefo7ySAB9yAMDKsaCLw5oE6uOjNSD+CjkY+XjAfpi8F 2w7XHQuAf+MooTHp9LWua+21r2vaxz9vs1EyPJUsmt9F76SXAsManX8FdPT+oNaD68SPYNxk 6F238FG3pdgqNr7QbWud6skmIDdJ8fckpobnfvH70tzv3j96uDpVxBhwJ0ED94kN2n701vT9 ttVTLA71GF7n/miCQfyJKam537x+9Lc794/erbOl2vALXsgiXHXRpBc0n4gKX7JsmtosaX2E xzAGkGfOUlNLc794/elud+8fvVw9Lc3eLbWssrYHlmvBIAkoeRhOorLi4OLXbXRxqJBCSmvu d+8fvS3O/eP3pkklL7neJ+9Lc7xP3pkklL7neJS3O8SmSSUqT4pSUkklPQfUD/xYdM/4x3/U OVhV/qB/4sOmf8Y7/qHKwkp7B3U8ey3LwvtTG2Y+fmEscRuBdfYRyrFnWrAB6zvWgRuadpge Q0Xmf1ngfWbqx1n7dk6/9deqLMu+v6Ftg+Diqc+X5njMocxQv5JRFBsQyYKqWLXuC959c+tU W9IaKHHefYWu+lquCoyraKzXWYlweHdw4AjT4gp7sqy+Bc97wOJKHNXg771ZxxmATMgyPZiy GJIEL4R38Upzsst2+oduuggcpvteT++dTPzgN/IFCaf3XfelNH7rvvT1iR+fmPILrSS3UfdC Vmdl2M9N9hLeCPHj+5Dmj9133pTR+6770lJDnZZABtOkAfIz/BO7Py3PDzYdzeNAhTR+6770 po/dd96SkhzsstDTYYEwB5iP4p2dQzGRttIjjhCmj9133pTR+6770lJDn5ZEGwnQgyAZB7FN dmX3ViuwyJmfgIAUJo/dd96U0fuu+9JTBJTmj9133pTR+6770lMElOaP3XfelNP7rvvSUwSU 5p/dd96aavA/ekpikpTX4FN7fApKd/6gf+LDpn/GO/6hysIH1Bj/AJ4dM/4x3/UOVjRJT1HV v/Gt/amZ9v8A6Z69v2n+lfzu8+p9D2/SnjRVf/XQ+X/s2vKEklPq/wD66H/X7Wl/66H/AF+1 ryhJJT6v/wCuh/1+1pf+uh/1+1ryhJJT6v8A+uh/1+1pf+uh/wBfta8oSSU+r/8Arof9ftaX /rof9fta8oSSU+r/AProf9ftaX/rof8AX7WvKEklPq//AK6H/X7Wl/66H/X7WvKEklPq/wD6 6H/X7Wl/66H/AF+1ryhJJT6v/wCuh/1+1pf+uh/1+1ryhJJT6v8A+uh/1+1pf+uh/wBfta8o SSU+r/8Arof9ftaX/rof9fta8oSSU+0fV3/xtf21i/sj/lDcfs/9J+ltP+k9vHiif+u58v8A 2YXiaSSn/9kNCmVuZHN0cmVhbQ1lbmRvYmoNNCAwIG9iag08PC9CaXRzUGVyQ29tcG9uZW50 IDgvQ29sb3JTcGFjZSA1MiAwIFIvRmlsdGVyL0RDVERlY29kZS9IZWlnaHQgMjk1L0xlbmd0 aCAxMTg5OS9TdWJ0eXBlL0ltYWdlL1R5cGUvWE9iamVjdC9XaWR0aCAyMDA+PnN0cmVhbQ0K /9j/7gAOQWRvYmUAZIAAAAAB/9sAhAAMCAgICQgMCQkMEQsKCxEVDwwMDxUYExMVExMYFxIU FBQUEhcXGxweHBsXJCQnJyQkNTMzMzU7Ozs7Ozs7Ozs7AQ0LCw0ODRAODhAUDg8OFBQQEREQ FB0UFBUUFB0lGhcXFxcaJSAjHh4eIyAoKCUlKCgyMjAyMjs7Ozs7Ozs7Ozv/wAARCAEnAMgD ASIAAhEBAxEB/8QBPwAAAQUBAQEBAQEAAAAAAAAAAwABAgQFBgcICQoLAQABBQEBAQEBAQAA AAAAAAABAAIDBAUGBwgJCgsQAAEEAQMCBAIFBwYIBQMMMwEAAhEDBCESMQVBUWETInGBMgYU kaGxQiMkFVLBYjM0coLRQwclklPw4fFjczUWorKDJkSTVGRFwqN0NhfSVeJl8rOEw9N14/NG J5SkhbSVxNTk9KW1xdXl9VZmdoaWprbG1ub2N0dXZ3eHl6e3x9fn9xEAAgIBAgQEAwQFBgcH BgU1AQACEQMhMRIEQVFhcSITBTKBkRShsUIjwVLR8DMkYuFygpJDUxVjczTxJQYWorKDByY1 wtJEk1SjF2RFVTZ0ZeLys4TD03Xj80aUpIW0lcTU5PSltcXV5fVWZnaGlqa2xtbm9ic3R1dn d4eXp7fH/9oADAMBAAIRAxEAPwD0y3IFb3AmAIkkwBom+1hYXXbsZ+dZTe17g0NBDXEAy1rt Qqw6hUAABZA0AnsE/wBNb6rfVe2j0ducK63WBrrNonY3Vx+CzK/rO59jWfZ5LjGxj9zx8toB +9U/2s3s1yEzNxa7nXsrcHvA002tjuwdiUYmFGxfZbITJHCaem+1jzS+1hc7+1m/uuS/azf3 XJmi7V6L7WEvtYXO/tZn7rkv2sz91yStXovtY8VmZX1rw8W3LqtrtBwmNse6AA4PMDYqH7WZ +65Uc2vAzn3WXC0PvY1ji0jQMO5pA+KSdXbP1vwPsFWY1tjnXgGqgD3OJIaADxyVHF+uXT8r Nrwq2vbc8Q8OgbHajYfPRYX2bA+xNwQ68Us9zYIkPndv+OihV0/pVV9V7W2l9Lg8yR73tkh7 vPVJT2ruoVgPIO91YlzGkF3whZH/ADzoFVljsS8Gh4Ze3T2A6gk/wVL7bjB1r2VGuy8RZa2A 4+crLZ03p9dNVDbso10WeswEtMv8X6e75pKd1/176e02t9C4mrIZixA1LxO8fyR3Rem/XLD6 jn/Ya6nsf7y15IIPpnaZ00WA/p/SbMg5Lm3G0kkncIlxBJj+ypYWJ07CymZVXrOfXv8ATa4j a31DLuOfmkp7X7WE/wBrC5z9rM/dcl+1mfuuSRq9H9rCX2sLnP2sz91yX7WZ+65JWr0f2sJf ax4rnP2sz91yX7WZ+65JWr0FmcK63P52gmJ8FiZf1zZiZONi21MNuWYriwFo83O26ILuqVua WlriHCCPIqh9k6GTuOI4nx3H8EyfHpwkeNoPF0er6f1QZlrqXQy2oglrHBwLSD3hJZPQbcOn Krx8Wo1te4zOvY90kalw1Y4q36Wn1V4uJ9dM6zH6vayt2wvLJdzA9NvCwP2pk/8Achx+DQpf 41M23G6zYWAaPZ/56YsT6n/WLGx8zKszrGUl+O5lDnzt3nxIBhFc7P7UyJj7Q6fDaEv2pedf tJ+4JYf1k+rVGPabbajbaT6jmtcbHPDpncR9GOFzP1g6/Xb1N92CGHHe1paGAtA01BHikp7P p+fZfW71HbiwwHcSFa+0Fcp9Ws+23Ete4CS/+C1vtVngElOvW+y2xtdQL7HmGtHJKLfRm4zN +RV6bJiS4HX5LP6NmbOrYjrCGViwbnHQALZs+zt6lXdlV4bMX1jL6rC8umdhe3wnlJTTrGRa xtlbC6uwlrHyACRyFB1tjQ0vBaHatJ4IHMLWGaP1GvPsxzY2+42tqI2Bu32Ewsnq/ULLumdP LX1vawPY9ojc1wOmnhCSmxXidRtrbbVQ59bxLCCNfgFWORtJDtC3RwPI+KvY3U8Bg6Ky5jbH gEOt3lvomdJaP4otFmLdfi3Ptoc2iy8ZbnkAuJ/mzHeUlOdY+ytjLLAWV2ia3HhwHgofamgT uEHhaWHm4Tq8VtjmOvbTaKGuIhtm8xzoDHCJRlYpzr2troa8trFrmvG4H85zd3tP8pJTlC8u IDdS4w0DuSpXPsx7DVePTsb9JhOoQRlso6+002MfQzIEWgQ3bOphbDc5t991mNZj+t9rP2t1 0e7G/kTykpyvtQmJ18E/2gqx1DOxPsVeP04VAZGRYwucPc1k+3Xs1ZwxMkvDPWxxL3Vzv0lg mfgeySmz65S9crKOTYCRA0Mfcl9qs8Akp1fXKXrlZX2qzwCX2qzwCSnV+0eatUYfUMir1qqi auznENn4SsD7U/SQIkT8JXb35IyrOlU4/vwrAHvDRLW7BpJHBlJTQ6C97es0VWAteHEOaeQd rklYfl0W/XXGZQQ7aC21w43BjkklPM/4wen0dQ67lU3Et2mstc3kfomLlP8Amnhf9yH/AOav dM2rAa71LqK32P8AznNBJjTkhVP8nEwMSkk8DYP7lXyc3hxy4JS9XZfHHKQsDR8W/wCaeF/3 If8A5qb/AJp4X/ch/wDmr259GLW0OfhVBp77G/joiY+P0u+QMarcORsb/cnR5nGZjHZEzsJC kGEqvo+QdPwaMCj0KSXAnc5x5JVmV6d1LJ+rvS3Vsza6q33T6bBWCXbeYACNhfsHOxm5eKzH soeSA8NbEjQjUcqZa+V6JtrRwAvXDgdMB2nHp3RMbGzH3Krj2dAyXtrqpqLntL2zW0aNO09v FJT5bDfAJ9JnuvWzgdMbO7HpEcy1v9yoZ2f9VunuubmfZ6jjNY+6WD2tsO1pOncpKfM9NfPl NDfBeoNyPq27Oq6e1uOcq+v1qqgxsms/ncK9+zenf9xqv8xv9ySnyGG+CUN4hevfs3p3/car /Mb/AHJfs3p3/car/Mb/AHJKfItOExDT2Xr37N6d/wBxqv8AMb/cl+zenf8Acar/ADG/3JKf IdEob4L179m9O/7jVf5jf7kv2b07/uNV/mN/uSU+RSlK9d/ZvTv+41X+Y3+5L9m9O/7jVf5j f7klPkUpSvXf2b07/uNV/mN/uS/ZvTv+41X+Y3+5JT5FKJXk5FTSyq19bXctaSAV6wendOHO NV/mN/uSHT+mnjGq/wAxv9ySnzv6pH/sgxPHc7/qHJL0evBwqnh9dFbHjhzWgEfOEklNDrdj WOqnvMINGNmN2ZIrJaw7tnDiFPrxDbsZ5+ix0uPlK02ZWO+r1m2NNfO6dFmfdceXm8s5SowM aH03bPuGOGAAviu2lkZ7Mmh9OOx77CPe2I2/FD6M4G6xvcN1Cp/tOyjNybcZotquIgnTUCFY 6Fvdk32WfTeNzo4klNOSGTm8MuPinGUokAaUu4DHDOxQIBHe2l9a+mdQyuqdNy8Wm62rGFot OO8V2DeBEF3wXP2/Vbr7en4dVlVhx2uuLsalzTY19ji5lljjoXea9AvzG02Bm0vIG55H5rR3 QXdVY3/BPLiNzWiNW/vLVajx4+r3Xa+t15GVbe8Vmt9WW1zYZUxvvZZP4xyo9I6Rm9VwW2t3 HHsxbm1W7o/TC3fX+Rdm7PD8V9gqJLSGmt0a7kNnVMWqKRWawzR7ABDPuSU8dl/V76x39Pxs rNre/IvudZ1HFqcCR7RXVt3aECJUc76o9byWXVOrdcy7HxKS61zS8+nYHWB0eDV2h6tWW7mN I179x4hSf1ahgENc4nsPHuPkkp5Xon1d6zR1/E6jmUgChtmNv3AxSwRV/nLuFQy+oWVGv0Wb w9hfrM6Jh1jHglwMNGrhxu09v4pKdBJZ46qwkQwx3b3UndVxw8NAc6e44iYlJTeSWX+13j1J rGle+vX6TtfatDHsdZQyxwhz2gkDsSkpIkkkkpSSSSSlJJJJKea+sXXXYVtdLX+n6nue/uGA x7fNRx+o5GLm4zHXfaMTOE41jtH/ADCJ9YugfbnV2g7bKXbq3xuH9V7fBVun9Cy7epftDNt9 e9o21BrS2qscaAq1E4faFkXUuIVqT0pryGX3DQ0sUb0rrb1THbmh3ikkxoa0NHYJKq2EOVj1 ZDdlgMjghUf2Fj/vPg6lo4+5c3/jS+sHU+lYeJjdPtOO7Lc71Lm/SDW9m+EyuT+r93WOpYz8 m3rN7ntdtGK2yHAfvunsVBk5bDM8c4Wdr1/YvGWcY0Dp2fUh0eoaBzvuVvFxqsVpDASTySF4 51rP6v0+gWVdYybLbLSwV79GtaJdJ+K6z/FZ9Y+q9TGZg9QuOSMcNfVa/wCmA7lpPdLHymDH LjhACXdUss5DWRIe5tpotcH2MJLdAfJRbi4rZis6+Pn2VLrHWbsLJxcHDx/tWbmbjWwu2Na1 n0nOcqN31xGC7EZ1XDsw3ZIt9Rp95aau42/Sa7xU6x3HY2M4OBrMO5+SiMPEBafT1b38fj4q j/zs6D69FAyml2SGurcPo/pPoBx7F3ZDs+uf1eq9XfkECi30LDtMeofzB4lJTofYsYObDSGN JO3xJUnYmI4EGvl28x+8eSqtH1k6TkCr07Tuuu+zsYQQ71I3bSPgqfX/AKzXdMz6cDHpY+22 s3b7n+mwhpjY10fSKSnXsxcawguYdNByNPBN9kxJcfS+kIIjRYrvri2vrFfTLsR9e/F+1OsL gQ10F3p/HRUa/r/Zk4GJkU4babcyy1jftD9lbfS7OfH0ndklPT14dDLN4aSAIa09vNOMTEGy Ko9PRseHKfpuXZmYVWTZUaH2CXVkh0f2hyrKSmscTEMTV9EyPjr/AHozNrGhrQQBoAppJKY7 x4FLePAqSSSmO8eBS3jwKkkkpjvHgUt48CpJJKY7x4FLePAqNlzKwS9wAHMqNWVTbrW8OHiD KVKSh09iknSSU+cf42sXIzL+k42LWbbrHWBrB8uVxX/N3qGDVkZF7GuyKABVVW8Ey7lxjkNX on+MW8YuX03Itmuh3qUuv/NY54G3ce0wuIyr6KiLLLWhrPdIcDMdh8VHOcoyAEbtt8vy+PJj nKWThMejQxehdSzukOzNhYxlm6u60wHtIh0T4Lrv8UuPbjdV6nTaIeKqzpqIJ0KxD1TH6hjN srvZWAIdQ54bsjtB7Lpv8WfpXdX6nl44L6jXWyy/8x1o+lsShORkQRQC3NhxwxwlGYnKW9dH rutdFvzsjGzsLJ+yZ2HuFdhaHNc1/wBJrmlV6vqzf6uPkZWc/JyKWXtfY8DU3iNB2DewWlmZ N9VzWM9rdpcPbu3H93yVf7ZnO0rIOm4uLfon9xSNZx8T6hVYuRRY29ttbBV6zbGAkmr6Jb4K 2fqjW7HpoN5inPPUJ2jU6+w/etIZOYKLA6DeCNh26QfLyQbczMNjqmzpw4NgghJTnYnQ7nfX PK6q6t1WHXWPSa4ja+9wh1jR/VACu9f6FldUc30chjKyw12UXVtsYZ/PbPDgitu6i1oaHyAY Jc2Se8pv2llB7iW+xrd7gWxEchJTk2/UOp9NdQzLB6VdNbXwN36I66/yhoju+qV9eH9lxcpm z1HvdVdW2ytweAILT3bGhV852e55YGhu5m5unYgmfki25l9dVBadxI/Se3UmElL9C6S3o/TK sBthtFUkvdpq47oA7DXRaCy25XUAdzoLdPbt8TH4JmZ2U4AOOzn3bSQ4z9EJKdVJZBy+oU1M a73F0H1C36Mz7SijI6g94ALWBxOhbMQ0H8UlOkkq2DkWZNRtcNoJho+Gh/FWUlKSSSSUpJJJ JTxn1s6jfTlY1LWl7XmQzs54MbSnGTXi9bxKcf8AR35DZzMVp3Nr08Vv9U6NRnth7Q8Tu2nQ h37zXDgqt036t42Fa6xjNrn/AE3lxe93luKsxzYxiESDxASGm0r7+TXlin7hII4SQfKuzs1H dW0nuElIAAQOAkqzYa+dRiZGO+rNZXZjO+m20At/FY37D+psD9UxIHGiB9d8p1Ixa90MeXEt 8YXK/bWmBpJIA+amhh4o8VrJZKNPYnoX1LOpw8P7gtfp+NhY2O2rp9dVWOPotqADfwXMZHQs XDwxdmZja7nMLmV6AEgTtHiifUjMfdfk1SdjWh23tMppxjhJBJpQkbAI3er9/klD/ALlvrh1 LqeN1PpmJhWZDa8gWm6vEa11rtgERvBQ3/W2/pmTi4N1bshpNbL7LnAZDXWnTexogQo171vv 8kof4BcyfrhksZlZz8Nv7MoNrWWCweqXVSNa+YJCzcn659XyaMb7Pj/Zsl2ZTWAXD0ra7Wud t3u480lPce/yTPr3tLXtaQeQuUZ9d8zIDcbGwmHqDHXDIY+0Cpoo+kWP/OlRf9fnWU/a8TDD 8XHoZkZpseGvaHmNtbfzoSU9dDvAaJQ7wC5Lo31syMr6w5HR/wCdJudYyyyGNZRAIYz952vC 69JTH3+SUO8BoppJKYEPPICRDyIIEHlTSSUja0saGsAa0cAKXv8AJSSSUx9/kl7/ACUkklMf f5Je/wAlJJJTH3+SXv8AJVc7qWPhgGw6kw1o1JPgAg4fWsbJudRqy1v0q3iHJ3BIjio0jijd Xq6A3d4STgykmpeF/wAZj3Ms6ftMTvn8FzPQ8zptXUGu6uw24sQGtBJ3kjadF3X116Hb1OrH vqYbTjEyxvMO7hci36uX72H7Jdo5p+ifFW8Uo+1wk1uwTB47ep+uuV0OrEpbm1Ofk2Vu+wkA w0x3WT/i0e92fm7zMVM/KtH66dLszfsG2l9vpNIOwExp3hG+pPQbunOyMuys1euAxrHckDvC ZcRhIvUrqJyDwejtwcS7Kpy7aw7Ixw4U2Hlod9L71Tyfq50XKzDnX47XZBc1znSRLmfRJExI R8zGvtua5mrQ0husbXfvKv8As7Jfo72tjUbjq799V2VX/N3odeRdmHHZvuDhYXElvv8ApQ06 Ce6ifqv0N2L9ldRvp3i0bnOJDm/RIcTIidEYYNv2ezHI3MeQRJmI5QhhZu95IBrMbqw6A6El Mbfqt9X3YlWK/Ga2mgucwglrgX/SlwMnd3Usj6sdByH0PsxWH7O1tdYGg2N1a1wH0gPNRs6d mPc+TII0G7SP3FMYGWDodoJ/R+6fT1/FJSU9F6SMhl/oMbe203MeND6hEEj5K5ZfTUQLHhpP AJ5WYenZro2u9PaZdrO4jk+Uqy/EsuyKrX/o21tLYae+iSm7I57JFzWiSQB4rLOFmmyxx1rc QSwOgOg/3KL+nZjnv19pA2t3aR+4kp1pTFzQQCQCdAswYOX29oP82N380fHzUXdOzXxtf6Za ZJmdxB58pSU66SjWCGNBEGBIUklKSSSSUpMnSSU8T9cGZoyKLqiW1MOyx4E+mSZDz5KNOa7q HWMX7IDbVhNjJz3Db6pjhdjfiVX6u0dxuChR0+ikh30iOAdAPkFYHMAYxEx1iCAfPuwHATMy 4tCQSPJPVIrbPMJKaSrs7j/WT6ydN+ruIMrOc4mw7aqWauefILlv/Hf6T/3Byf8Ao/3qp/jk 0/Zh87P4LzXcElPqv/jv9I/7g5P/AEf710v1a+tHTPrJjvtwnPZZUYuofo5s8fJeG4eI7Lry bGvDGYrA9xOu4kw1jfMr0L/FZhnC6z1LGe9tljaai8t4Bdrt+ISU+i3XY1EG+5tU8b3Bs/en rsou1qtFg59rg78i5b639OzM/r3R6sVtchtxLr2GyoaN+k0ELOzGdT6VmZoxQ6hp+y15WRjs O2uon9LZUwzwkp73YPEpnmuthfY/YxurnOMAfElcG7qv1m+x1vw7b8im3Iswse9zIe5r/wCb yHiPzChW5HV+oYFWb1dl9nTqc1lWXjhpB2VAtdaWjUtc6CUlPfstxnta9lzXNeYY4OBDj4CO VPYPErhMnHxMyzDHQq78LHs6gD9oaCGyGe6ypruGqrnde+sVfTqWC7IGXR65bYGQLfTeWs3e 0ySOySn0Xa06Bx051T7B4lcz9VhkftrqtmRba59zaLBXYCGDcz3bPmuoSUx2eZS2DxKkkkpj sHiUtg8SpJJKY7B4lLYPEqSSSmOweJS2DxKkkkpjsHiUtg8SpJJKYbB4lLYPErI6z1tuE5lT Y9SwwN2jQP3nIeN1jJrzW4mY1v6UTTczVjx5KQYpmPFWm4+iw5Ig1buBsdyknaQ5oI4KSjXv mX+Okwzph/lWfwXl29e7/Xv6nt+tOFVXXeMfLxiXUudq0zy1y4H/AMZv6xEf0zF+939ySnJw 81+LjVUC/HLWj1HkM5A+iJ7nzXW/4psu3L6v1W60tc/YwbmCAdeVnP8A8U31mc1zftWGA5oZ pv0DfDRdl9QvqUPqtRc/IyG35mTAeWaMa0cASkp6i3Jpqc1tjtpdwhnqGGGkmwQDCV+NXdZv 3lpLdjwO7T2Q29PpmXWFxDdjeNG+CSkpzsYY5va7dW0wYHy4SGfikaPn27iI7KDsKosextha HwTEct4TfYKtrx6h3WRvdpqQkpIM7E3NYLBLhI8E37RxYndp4whs6bjtrNZeSHEE/JRs6fuD C2472EQ4xo0eSSk5z8UCd8+0uEeASHUcQgn1AAG7jPggfsyjcHeqdNe3JEFJvS8ZpJ3kzr25 +PySUmuz66n1sDS42jc3tok3qGMY3O2nXQ9o8VI49Trm3PduLQQ0HgAoQ6fQHE7ztcdz2+JH CSkj+oYzWkh2907Q1vJd4KJ6hWxzWXtdS50xOo080JnS8ZkkPduI0dPBBmUT7FW7c6y0ve4F pcfA+A7JKZvz8ZjtpdLtwbAE6nRWFRHTaRZ6nqmQRHHYyru5vikpkkm3N8UtzfFJS6Sbc3xT bm+KSnk/rV0S7Luqur1dUYNZO0WMJmA7sULDwepZfUqL8hgxsbDG3Ew2HcR5uK7B3pvEOhw8 CmYymv6Aa34KYcxMQENNAQD1F7sRwRMzLXWiR3plW3awN8AknBB4KShZWp1DObiNboC9/EoD MjqT2B7apaeNBKzvrVmDGysEObLXO1+8K51u7NZVjnH3tx3H9O6oS8NjSFMIaQ29d6nwa8st HJqf1daR8V7uo5lP86zZPBI0Vnp+e3K3NIG9mungqPS3V5rMjHdknJqj2stbFrD5qp9V8gPz 8ukGfSET8ClLGOGWmsK/FEMpMoa3HJY+x1erdcw+lvpqtY+7IyNxqopbue4M1cY8lHG+sHS8 myqtryw20+uPUbshgO07t0QZVP609Lys84z6cSvLbVu3fpDTcwkaOqsb+IWHk/U76w5DcK+2 9tuRhVa1ud7bHCwvbTaQNQG91C2XtfteHtD/AFq9pO0HcI3eHxSZmYVm8131PFYmza9p2j+V B0XEnpt131j6g1g/yfi0uy3VAGG5llZY5jT3010VTp31T6r1DpTbaamdO3Ynp+153Xu9TfNg j26BJT6JTdj5FYtoey2s8PYQ4feFOB4LB+qXRr+lY2R61X2c5Fm/0Q/eBAAkQABK30lLQPBK B4J0klLQPBKB4J0klLQPBKB4J0klLQPBKB4J0klLQPBKB4J0klLQPBKB4J0klMSWjmEgWHQQ uX+s/XH4l1VAcWNs9zy36RaDG0Jqc2zC6hiMZa5+N1ATXVb/ADjPiFMOXkYiX7wJH0YjmiJG PYgH6vVQEk1btzA7xSULK8r9d2F1mJ5btfPRPi9Woz8ehl+S7CzMbRtn5ju2q6DPwMbPq9HI ZuaNQ4aEHyWb/wA0+meNn+cFahlxe3GM7Eo3RAvdo5MGf3pTx8MozAuMjWysN/TsN93UL81t 91jdrnCBoOwaFQ+qbhZ1XOuY3ayz3AeElXv+aXS/+E/zlo4HT8bp9ZrxqyN2rnEyT80JZMfB MRMpSnQ1FAALoYcxnjMoxhCBMvSbJJZ5OYabNjWbobveSY9o8PEoDuqPGgplxG9o3fm+fmrj 667CHPr3FvBPZRbRS2dtQE6nTxVZuIWZxOPZYaoezlgI1nhCr6qXWmsMn2B4jgDuJ8VcNVRB BqGuhTGirZsbXt0gEASOySmqerDV7a5qA3F06kHTQImP1H1mWP8ATI2Dc0TyFNmHjscxwqks aGtnsAiCiloIFQAJk/NJTSZ1ZzrWM2avBhvg4diVI9Vk/o65aAS5xMfR+kArQopDdragPDQI bcHHbs/R7vTmJ8XGSUlMcPqAyrC0MLWxLXHuAY1V1CZXWxxcyva53JCnuP7pSUySUdx/dKW4 /ulJTJJR3H90pbj+6UlMklHcf3SluP7pSUySUdx/dKW4/ulJTidd6AzPLHwQ+p2+qxmrmn4H kKr076u2DPdn5Vj8jJdp61g2ho/ktXS7j+6Utx/dKkGaYjwiWm30WHFAy4iNd1NaGtDRwNEk gSe0JKNe+e/44OsdSwcHDxcO51DMlzjc5hhxDY0nwXG9A+rP1t61jjLryraMU/Qse90v/qie F1P+OVocektd9F1jg74EtlT6h1SnB+rtWfQ9zWUbanVsPHYQE6MSb8NVs5iNd5Gh5vGdZ6P9 ZOkOi7Lue2CZDnAkDw11XZf4nusdTyvt2Bl3uyKaQ2ykvMls8gHwWTd0/rfUqB1LPyC7HDWv xMeZhzu5+S0P8UbGs6x1drPoAAN+9GceGtxeuqMc+IHUExNGtnsfrT13M6U7Frx2MYzILt+X a1zqq9o0a7YDG5Dd9c8bFx6Dm1OsvtpOQ/7L+lrDGnaXbvBaPV+kWdR9N9OXZiWVSPZDmOa7 kPY7Qqlj/U3p+NT6NVtgacZ+M7Ua+o4vc/4yUxels+tvS686jDd6n6yGmu6PYS8bmjx/BU3f Xvp7qbnUUXmxlVllAe3a201GHNY7yTj6kYbcpmR9pud6ZreytxBG+obR8AfBB6R9TrPszD1W +x762XV1Y4I2VC4nc5pjmElN6j63YTsN2RkVWUvpxqsq6siSG2naI+agfrv0cMyrC20MxHip ziyA61xgVsPcod/1KpvY1j868A0Mxr9sfpK6jur3adke36pYNnTrcD1HgPv+1Ms0lloMgjyS U3+j9Yw+sYn2rEJ2hxY9jtHNe3lpV9Uek9Nb03F+ziw3PLi+y1wALnHyaArySlJJJpCSl0kk klKSSSSUpJJJJSkkkklIb8qmhpdY4NA5JMBDx+oYuT/NWB8cwVyn1uzMqrLxWsbLHOIbP0fU nhyX2uodexKsYA5Zb/lAU61N01hWBy94xK/mEpeXD3YDnqZjWxA+17RJRqJNbSfBJV2d85/x y42U7F6fl11Osope5tzmidu6In7lxGD1qs4zsfLNnpvgPc1u4ODeN7COR4he5dW6h03p+I+/ qltdWLw71YIJPaDysfF639TcwE4zabGjuKNPyIg1rsogHQi3z3qf13dd037DhtLGgbXZD27S BEexscrY/wATuPkG/qGYanMxXNbXW9wjcQZPK6bJ+sX1IxSPtBx654LqdPyLZ6P1LpfUcQW9 IuqsxmnbFQADT4EdkiSdSbQIiIoCkmZZktuaK9wbtJbtEy/wd5Kvv6i/RjngRLnFokP/AHR5 LTh/iEof4oJaLX5jce1ri42CCx5b9/CGyzqECw74aAPTgayDJWlD/EJQ/wAQkpyBlZ+/03F4 OpZDZLuIB8kRludUXMIe8ud7dJA92uvhC0trpmRI4MJ4f4pKcp7+qAtZLjuaTMck8j5KNlmf BrAsDNsGBqIjULXh/iEof4hJTm13Zwtr3b3VSe0Et8SmyPX+1Gypr3OMbWkHQRy08LTh/iEo f4hJTl2WdSrbtBe8mHB0Dnu1R9bNvrcWOsn86GxtI4DVrQ/xCYNcOCB8klOeLs+xzWN3MiA9 xb3CL06zMeX/AGmfgREHwCuQ/wAQlD/EJKZJKMP8QlD/ABCSmSSjD/EJQ/xCSmnn9LozWlr2 tcHfSY4S0+fxVfA6BiYZPp1srB1cGAyfi46rUh/iEof4hHilXDZrteiOGN3QvuuEkwDu5SQS 8p9eMDGy7sB2U31WVuPp0n6JeYgkeS4v6xfXLH6LnjB6fWHWVR9peGgAOI+i1dr9d7hTf0+w mNr3fBeQ9U6Zbf1DIY8O9Z73WtdEyCeCoZUZkS2GzNGxAGNWd3ctz8Tr1Ytj+dO18gD3Fbn+ J+l2N1LquOCdjWt9vaQVxDG/YMdtTD72He6eZ8SOy7f/ABQXPv6l1K14hzqmT8Z5RxiiaOis puIvd6r64/bXXYVdF36E7zdiNt9CyyAIcx509vgstn1s6izDx24Ftb2NxbL325xixzqnlprG 3Q8crss7A6dnNbXnU13AH2B/IPkeVn3fVzo92dVmWsrdXj0/Z68cgemNd0/FSsLiP+u2a/qO LVjsqNOQaq31mdzLLW7vcfJCr+vfU33to+z17rHNxWnX+l79r2R4Buq6x/Tej+r9sdRV6jSP 0sDQt0b8wpjB6YH+oKag5lht3QJFh/P+KSnlK/rX1m23bc2luNfbk4lZrJ9Rr6WmHqVHXZ+o lWS7LF+cKWutiwepO6DMahdQ3C6YCAKqhteXjQfTfyR5lBr6J0Kre6vFoZuG18AAfApKeQP1 r69hX5tDn15D7MwUY06Cpvp79fjC7LoefkdQ6XRl5NXoXWA76wQ4SDEgjxSv6Z0e5z230VOd fG+QJdtGh08lapbRTWyqna2toitrYiB4JKSpKBsrEy4COdRon3smNwnwlJTJJRNjBqXAD4qI vqJI3iW/S8klJEkP7RSC4F7QWiXa8BTBDgCDIOoKSl0kkklKSSTJKaHUerU4W1rvc952sYOS UHE64y3JdiXMdTe3X039x5FYP1uws2y+q+ncWV+24MEua0md7R3UMe7K6h1TFdTW9mFgDb9o uEWWnzlWo4YHEJX0kSexGzXllkMhjXUAeNvbAyJCSjUCK2g8xqkqrYeU/wAYPQur9Txse/pQ F1mMT6uMTBex3dp8QuWf9Uuu5mO12VhWhzGja9rg20fyfNeoZF1dXP0ncCfBVT1Khu4Oc3cw S5u7WFBkni4qMql4MuPjrQWHzJ/+LjqdjIqbYxvJbaPcT5nuuu+of1Pu+r5yMnIf+kyQG+n4 BvcreZ1THeGkPaC/6LSdfuVuqxlhj86J0PZLHLHxUJEnsnIZ1rGkWXiWXWh7S2Npb7vzf5Tf NAHSnu/nC2ANu0Tqf3z5q3ZkYdVvo2WtZYWmwMLoO1v0nfAKNWZgXGptV7LDe0vpDXA7mjlz fEKdhRfs9wosoaW7HwQD2IUGdMeYFhbtGhAn3eblcttxqXMbbY1jrXbaw4xud4BNj34uUxz8 extrGuLHOYZAcOQkppnplwLS14kOkHXQJmdMtNhda5rmOMlvYwtLY1LY1JTlnpNxG3e3TUWa 7v6vwRsXp76XNsJBe0ENHYEqwMnCdkvxBcw5FbQ99O73hp/OLfBSotxsmoXUPFtbph7TIMGD qkpz7On5AslrWva5+4tPHxKkel5HqA+oCGtgHvxp9xV6uzGtfYyt4e6o7bGgyWnmCibGpKc2 rpLmjbY8WNBkAz3H96a3p91bd4PqbYlgH0tI1WnsalsakpzGdKc6gb9osIgzrAiNq0qm7K2t MDaANONE+xqWxqSmSSjsalsakpkmTbGpbGpKYXY9V0bxqOHDQj5qNWHRU7cAXOHBcZhF2NTb GpKZpKIaBwkkpodSaXWsA52mFwuX9uyetmxj2NfUz0rPT9zDGrT5ld5n+mbmttIDHMcCSYGv muO6t9Ur/wBoOyehGrGrorDwzeSbrAZIiVTOO805Vbe5XLGA9XbQ9kPTzkU9RsdkuDrjBrcR AJP5sHhdp05rhaN8bvT1jjlcxifVa3JzKMzqQaabWF9tQeQa3RoF1eJUym9tVf0GVw3WdAUB jrLGVVqu5vJGQAB4jw6kbOJ9d+nZ17cPM6dUbshj/s1rW8+hf7bD8oWHT0TrmFR1FuNS9jen NbiYDmaWOx3O33OrPjB0XfXZdVLwx8kkSYEwPEoTuqYzRJ3T2EakfvfBXXPeMx8LqWTbQG05 TumtzQ7GOSSbmNNZFjiTqG7uFLovRep41uBUBlUY1NOTdbW1xAfdvmtrviu1ZnUPqNoJDWkA yIIlQHU8VwBaS6dYA7eKSnz/AB2fWq77WxrcypmQxhMl25tnqHftc7vt8FpY/T+t4nUqrmWZ dlVOeaw2x5c04zmSSR393ddWOq1+oGljtp4eNQZ4hTd1LGbunduaYLQNUlPD4eH9YK+uV/WC 3ALRl5Fld5Dibfsz5bWHM8GlUyzqGMMXpzvtldrcW19WPjEgi42u9NzwOy9DHVMU1+p7gJA1 Ec90IZWCck5Bqi8N2erH5nIBd5pKeRx+k9equs6m77QzPOXjepXWYrezYBa5zeCj/Vt3Xj9Z DbkV5NWLc203suJc1r93s1OnHELq29UxzUbHBzYiWka690W3Ox6du90B8Fp8ZMJKbCSqO6lQ J2yY4MaE/uz4qFXVKntJcxzSAXRHYaSkpvJKkerYoiNzp8BOvgpO6lQDtbLnEBzR4pKbaSou 6rQACGvMmAI58SPFFZnY77GVtJ3PEtkfgkpspJJJKcDrvXfsT66WENdZy53DW8boUMbquXRm VUZD23U5QnGyGaB3kgfWfoLs2yu5pAfUZbunY9vJY6OEDC6V1DK6nXmZrmAY424uLTPp1jxV qIw+0LIupcXe+lNeRy+4RRqxXautvXMduaHeKSTG7WBvgElVbCDMx68gbXRI7ESCPNUx0pn7 lYnwDv71D6wdUvwWVVY0C7IO1rj2XMX9b+sYdkNZcQ7EG68e32j+KYccSb28ivjOQFB6z9nE AACuB5H+9WcWhmODJlx8JgfBebZH1j+tobjOZkuAznbcUw33n+C6L6jfWTq3UMvP6R1do+19 PImwROv5ro00QGKIN7lBnIii9Rdj0XPD3EgxtMGJHgVBuFitMy4mNoJPDfBVuudbf0ek5BxL MjHY0vttYQAwDx3JdP8ArF0/LwG5lrvsh2tfZTcQH1h59m8dt3ZSLW2cXGc17DO2wQ4eKgMD EA9m5hmSQflChb17pFeQ7FOVUcln+ADhuJjdtHmq2H9bOi5GJRk3XtxDkiWVXEB/0i38qSm+ 3ExGkFoI28fJQZgYjH7wXT5lU6/rV0p+dnYjnitnTg035DyAyX8ALSw83EzqBkYdrb6XSA9h kSElIX4GI+JnQAc9got6fjiwnc70yAPT7EjxV9JJTTswcSz6W7jboeyVmFiWNa18uDAQ3XsR CuJJKaf2LFnvt7MnSfH4pzh4uws1AIg6+BlW0klNOrCxahDZ5n5qP7Ow9wd7tOBKvJJKaNGD RXtL3F7mk7SeAPAKTMLFZa21pO5pkCdJVxJJTH1G+KXqN8VJJJTAvYedQkDW36IA+ATue1vJ TNtY7gpKXDmnhJOkkp5r634r8m/CBLG0B/6YvtZV7ZExvc0/cucf0bE9fre22n0jWf2f+t06 u8/0mn9qF48kgeHqyQ9yvRdeD6lZ0UnG+r8WUC0Wn9pA5lGjJ/N/S66fuSt/6l9OGJ9bOu2V Ppfi2Foo9O+q1+0R9NrHue3+0AvDkkBw9KVP3K9fFXi/Qv1u6bm5j8S12Zi4/TcZ4fdRlOLG W2T+jD3eAPZZfVeiZeRfmvs6lgUnJbj/AG9rnR6fpu9kTwHjjcvDkk5jfZruklvUcVlWVhvx x1C23cbaheHOadzXe/3R4DVFr+r3T2Ylld3VcF5fgmhj3WNgTYXerqfo9pXiiSSn3TJ6HjRa 9vUsIXNtxLGNse3YX1MDQy3X8/kLZ+quCzFoy3/aaMi7IyHWXNxSDVW4/mCOI7r5ySSU/VSS +VUklP1UkvlVJJT9VJL5VSSU/VSS+VUklP1UkvlVJJT9VJL5VSSU/RPX2dWe9gx6w6ge679I xk6/R97moeJjZdWXTfhEOxbv6RR6rHekfiHGfkvnpJWY8XtiuDhqV739fHswHh4zfFditq+j 9TgvDWy2SdHcaeaS+WElWZ3/2Q0KZW5kc3RyZWFtDWVuZG9iag01IDAgb2JqDTw8L0JpdHNQ ZXJDb21wb25lbnQgOC9Db2xvclNwYWNlIDUyIDAgUi9GaWx0ZXIvRENURGVjb2RlL0hlaWdo dCAyNzUvTGVuZ3RoIDEwNjAwL1N1YnR5cGUvSW1hZ2UvVHlwZS9YT2JqZWN0L1dpZHRoIDM4 Nj4+c3RyZWFtDQr/2P/uAA5BZG9iZQBkgAAAAAH/2wCEAAwICAgJCAwJCQwRCwoLERUPDAwP FRgTExUTExgXEhQUFBQSFxcbHB4cGxckJCcnJCQ1MzMzNTs7Ozs7Ozs7OzsBDQsLDQ4NEA4O EBQODw4UFBARERAUHRQUFRQUHSUaFxcXFxolICMeHh4jICgoJSUoKDIyMDIyOzs7Ozs7Ozs7 O//AABEIARMBggMBIgACEQEDEQH/xAE/AAABBQEBAQEBAQAAAAAAAAADAAECBAUGBwgJCgsB AAEFAQEBAQEBAAAAAAAAAAEAAgMEBQYHCAkKCxAAAQQBAwIEAgUHBggFAwwzAQACEQMEIRIx BUFRYRMicYEyBhSRobFCIyQVUsFiMzRygtFDByWSU/Dh8WNzNRaisoMmRJNUZEXCo3Q2F9JV 4mXys4TD03Xj80YnlKSFtJXE1OT0pbXF1eX1VmZ2hpamtsbW5vY3R1dnd4eXp7fH1+f3EQAC AgECBAQDBAUGBwcGBTUBAAIRAyExEgRBUWFxIhMFMoGRFKGxQiPBUtHwMyRi4XKCkkNTFWNz NPElBhaisoMHJjXC0kSTVKMXZEVVNnRl4vKzhMPTdePzRpSkhbSVxNTk9KW1xdXl9VZmdoaW prbG1ub2JzdHV2d3h5ent8f/2gAMAwEAAhEDEQA/APVUkkySmkeq0NsbW9rmuc9zDPYsEyVF nUwXwGPc6xwaxkRGhOp+SfI6Rj3vve5zgcgNDoPG0zLfj3RRgVi8XBxkODgO2jdqOiNWDeoe oNtNZdYAS9pMbY0hDxuoPdjtJY6x7G7rjoImfxRB05rC51VrmOfuDjzId/cmZ0xtVfp1Wua1 zQyzuXAd/jqglQ6tjSwGR6jzWD4QJk+Slj9QZkWemxhBABduMGDwQO6Hd0XFtNp3Ob6rG1wD wG9x5oxwKzfVaT/MiKwBBGkc+CKNVrc7Zc+ltTnmpoe8jiD4eaBV1J++55aX0B7QHeAcPBEf iW2Zlz97q67GNbp38fgp/s6kVvqaSG2EO+G3sgpb9oNgPNbhS4lrbOxI8vNQHVqhW221jq2P ZvYT3HgpjpzYDDY40tJc2vwPx8kn9MpfXXW8ktqYWD590kr1ZwteaxWd7SN4BBAa786UsjPF NpqFbnltfquI4DQY+9Trxnsj9LqCCYaBIHZKzEZZY6wkgvr9MjymZSUiHUmbmB7HMFm0tJ/d fwSj1ZLbWPe0HaxxaCe+3wVbLwgaXNYHPe6sUgeAH53yRxiMOIMWTt27S4ck9z96SkB6qwe3 03Gzc1mxpB+lMGfkpftIeo2kVONznFpZ2ECZJ8EG3pjw9j67HF5ezcRADWsB4HzUn4FgyabK 3ndLnWW+ZEAR4Io1SM6lW+xtTWEWOmWkgRBgjzVxU3dMrc1jS4lrXbySPcXzO7d2V1BKkkkk lKSSSSUpJJJJSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJSkkkklKVP q2ZZhYFmTW0OewtgHjVwb/FXFmfWP/ki74s/6tqSm76zvD/B7/mkh/8ApBJJTaSSSSUwIf2I +5KLPEfcqn7XxPVdUS4Oa7bJaYJ40UH9c6eyx9Zed1Z2vAHBSU3os8R9yUWeI+5CxMynLa51 JJDTtMiNVYSUwizxH3JRZ4j7lNJJTCLPEfcnAd3IKkkkpY8IXrO8AinhVjO0wJMaDxKSknrO 8Al6zvALMxM/Pvy7MezDbU2ggW2CzdG4bhAVuvKxbS8V3Meav5wNcDt/reCSmx6zvAJes7wC pO6p04Gn9ZrIyHFlTg4QXBKnLtszLcWyk1emwWMeXA7gSRwOOElN31neAS9Z3gENJJST1neA S9Z3gENJJST1neAS9Z3gENJJST1neAS9Z3gENJJST1neAS9Z3gENJJST1neAS9Z3gENJJST1 neAS9Z3gENJJST1neAS9Z3gENJJST1neAS9Z3gENJJST1neAS9Z3gENJJST1neAS9Z3gENJJ ST1neAS9Z3gENJJST1neAS9Z3gENJJST1neAS9Z3gENJJTZTphwnSUpZn1i/5Iu+LP8Aq2rT WZ9Yv+SLviz/AKtqSmz/AOkEkv8A0gkkptJJJJKQurx7CNwaS07h5FQfjYbiS+thJ+kSBPii mmsmYjWU3o1STGrtSkpdnpMB27Wjy0U2uDhI1Hih/Z6+YU2tDRA0CSmSSSSSlJJJJKWPBVZW TwqryW1ucOQCQkpoHHyXWdVFYLHXtaKH8SQwDRZuHh0W0/rD8g+jQa7a/R9MiYkSPpkEK7+0 sqOW/cn/AGpl+I+5JTXbttbh33Y++mjI2stFRaXNLYDzXEt10VqvLB628ejcGuqFQtLCGbgS T7vBR/aeX4j7kfEzb7fU9SHBjdwaNOElN1JZ1XW63t3OosaJiAJKdvXMU7prsAb3AmQO8JKd BJUT1VjqTZj0vtcHtZsIg+4TKZvWaCAHU2h5GrIkhJTfSVRnUm31izHrc79IKiHgtOvJHwVw pKWSSSSUpJJJJSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJTZHCdMOE 6SlLM+sX/JF3xZ/1bVprM+sX/JF3xZ/1bUlNn/0gkl/6QSSU2kkkklIXY7SZDiPFN9nZ4mex Sc2/s4QT+CQZeeXwkpMPDwTqNYLWgEyR3UklKSSSSUpJJJJSx4VS3+af/VKtnhVLf5p/9UpK cWmp9z21s+k7haAwMdmOK8h7arnH6c86qlhNrdkM9R/ptGu7jUdldzGfrL7LKjey1kVFuoBS U1+oYraLB6TT6e2S7spdMnfbHOzT49lYyhkU9MrY6DpFk8gdoVfpf07dY9nPgkpnv6sdhbXE VkOB2/T8VPE/aJuZ67QKgyHnTV3jp3TCpnfKkeM6wn9Oks/pBDO/j8EaRbcjwS+QlVBXQAP1 gxpAlK2ur1S52QWuJgtCVKttx5JKo6uotMZPuHBlSZjNeN7LnFrtZCWirbKSjWz02Bkl0dzy pIJUkkkkpSSSSSlJJJJKUkkkkpSSSSSlJJJJKUkkkkpSSSSSlJJJJKUkkkkpsjhOmHCdJSlm fWL/AJIu+LP+ratNZn1i/wCSLviz/q2pKbP/AKQSS/8ASCSSm0kkkkpjvZ4pb2eKeAlA8ElL b2eKW9ningJQPBJS29nilvZ4p4HglASUtvZ4pw5p4MpQEoCSlHhVLf5p/wDVKtnhVXN3MLf3 hEpKcDkLQq6tYz02loFbBDgOT8FL9ks/0h+5L9lM/wBIfuSU08jIsvsc4k7HGQwnQI/TI32z qNmoRf2Uz/SH7kbFwxjOc4OLtwjUJKQNsw5G2hwM6Dz8FL1MfbJxzun6Pmrsd+6eSjaK8Wm1 9E/0c7vyJ3WY4sfFJcZ97h3VuSm44SsK1afq4zAXegQ1vfsrdbWNYAwbW8geEpyARBEjwKSC QpJJJJSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJSkkkklNkcJ0w4Tp KUsz6xf8kXfFn/VtWmsz6xf8kXfFn/VtSU2f/SCSX/pBJJTaTJ0klOd9ov8AXiTzG3tz9GPh rKNbl3ML2tqJgw13Yq1tbMwJ8U6KKaTcvIIk0GP4+SkcnIFbHelucZ3AdoVtMgqvFq1ZVz3h rqS0ESXdkM9QtEzSRHj58FXkoCSlmEuYHEbSRJHgpJJJJWPCrKyeFVc5rGOe4w1gLnHwASUu kspv1o6I9ge28lpBIIb4dviju630thpD7tvrs9SskaFvGqSm8ksln1p6Sd+97mFjtoAG7cP3 hCkPrL0gkzaQ2JGmsDmR2SU6iSyx9ZukQd1pBGsAbvgPireF1HDzvU+yv3+kQHyIglJTZSSS SUpJJJJSkkkklKSTpklKSSTpKWSSSSUpJJJJSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJTZ HCdMOE6SlLM+sX/JF3xZ/wBW1aazPrF/yRd8Wf8AVtSU2f8A0gkl/wCkEklNpJJJJSkkkklK SSSSUpJJJJSkkkklLHhVXtD63NIBDgQQdQZ7K0eFVcCWkA7SRo7wKSnG/ZOGSWWYAi4taTX7 WtA8uyPfQx/ss6eyz0wWM00Fc8BHNeZpOU3e6Yb2MeClUzM3MNmS0tH0miNdPFJTWZVjsM19 NDS7XcB4JCjCsscyzp7RY1pfEc/70f0csj+lCO/ASFWYCAcppcZMaajyPkkprirHFjXM6a0Q 3bxB8oRanfZi51WF6TrNX7e5HiUR9eSa2VuygHGQ53BdPgmdVabHOqytoOgaTIEQkpcZmR/3 GcfwUnZVw9PbjucXtlw/dPgU1teafT2ZDQGiH+ZnlQbVmF4Lspu8zDJ5CSmbsy4Mrd9ncS8E kfux4pDMvOn2dw8z2UfQzZLjlNknTwHkp+lc6p9dmQHb4O8GCI5hJTD7dk7j+quIGngSVL7X kemHnHcSXFu0cgDuU3p5AgtzB6cBrZg8pV15Yc0uy2ubu9w01HgkplXk5bi4Po2gAlp8x2Px TV5WSXMFlBbuOrhwB4pvs+UHFzMrRzpIJB0ngJrMfIDn215QaCSWgmQ2UlKd1C1rnNOO7QxP jrAKf7Zkta4uxnEj6IHdR9DLLoGWDvgkd9BrCcY/UYn7QGuGg76eKSlxmZXBxiXHtMBStybm bXNqLmlhJbGu791OKc3bYDf9IAM8j3KgzHz2iPtMgeISUyrych7zNBazbI8QR2Kb7TmGsvFE GQGtPMHkpjjZxcR9o9hHPefBP9nz4P6zr20SUsc3IAM4ryR4Hkp7cy2t7W+g525oM9gT+apP pzXPBbkBjQ0AgDl3imbj5YYB68P3FznDz7JKYszchxDvs7hWe/gUm5uSdTjODe3j8Um4uY0b RkkN7HvKTsbOJA+0+0c6ak+aSmf2q4MDjjukujaNTEcqAzMoz+rHnSTGimyjLBl+RuGogDxS px8pmjr9zQCGjz7EpKYfbMiY+zuJTjLvJE47g0kCU32fqBG1+TLSIMCDPip2UZTwxvrkNAh5 7mCkpjbmX1v2/Z3ETDXdjqmOZkDnFd96d+Ll73uqyCzcdAdQG+CnRVlMsLrrvUZEBsd/FJSP 7Zk6H7MQ0866o9drn22MLC1rI2vPDp8PgiyUklNgcJ0w4TpKUsz6xf8AJF3xZ/1bVprM+sX/ ACRd8Wf9W1JTZ/8ASCSX/pBJJTaSSSSUpJJJJSkkkklKSSSSUpJJJJSx4VVzQ5paeHCCrR4V V7tlb3iPa0u1408UlNYdNxdNHGNBqnPTsQ6bSPIFZA+tg21F2K5psa8vHu/RlujA7T88/grT OvvZh4uRmYllb8kOc5jNdjG/nmdUlN0dOxR2J+JSf0/HcxrPcNgIaZ11WbX9bMW1u+vFvcwE 7nQNIMfNaPTOo1dSx3ZFVb62B5YN/Jjukpm/Bx7I3AmABofBR/Z2JJJBO7U69+FZSJIa5w1L QTHwEpKarOnUisVvLnhri9pmInRSrwMWstLQZYZbJmCs0/WvEBprFL7rba/U21agHdt2E+KT frZgF7muqsYGjl0c+EdtUlOg7puMSDLhBmJ0KdnTcZoH0nEeJWWPrh08k/obYa4sJjw7t8Vd 6b1qjqNrqq6n1ObWLffGoJjSElJ29OxWuDmtIIIdzpISd03Fc5ziHbnefHwVlJJTUHS8bZse XO7kzElSq6dRWHSS5zwWuJ8CrKSSmu3p+Mx7XsBD2cGVZTJJKUkg5t78bDuyGNFjqmlwY47Q Y8Ssb/nbW0bXYzn2O0qDOHe3fuM8Dskp6BMsen6zYlr6KvSeLLnNY4dmOcJ1WyRBjwSUskkk kpSdZnU+uVdNzKMeyt1jLGufbY0E7APo8D84qq761VsscLMZ7WNDSwghxduHjwElO4kqPTur 09QseyuqyoMG4OsEBwmDHwKvJKUkkkkpSSSSSlJJJJKbI4TphwnSUpZn1i/5Iu+LP+ratNZn 1i/5Iu+LP+rakps/+kEkv/SCSSm0kkkkpSSSSSlJJJJKUkkkkpSSSSSljwqxiNeO88KyeFVc 0PaWO4cIPzSUqaocfZGm7j5Sk59WheW68TCq/svF0+nA7btPBIdMxm8F08STJSU2R6QJaAwE cgACEg+oO2NLQTrtED8Aq/7Mxi4ucXuJ5kp/2bjbS33e7kzr96SmxubO3cN3hOqdAqwqqnh7 C6QZ1Mo51BB76JKYNbQBua1gHiA0IdeHhMvsvrqZ618Gx0AlwHCZ2DUQACR4ny8FOvFqreHt mRoJKSlrcLEttqutpY6ygl1Rj6JPdFDWN+i1rfgAPyJ0klKSSSSUpJJJJSkkkklML3bKXO2e pH5nMqqc+kH+jHcDtd7Rpp8OFbsNmw+lBf8Amg8KoT1YlxhgB0AEJKXrzsZ9jGNoIc46HYNP M+CuKm39qBxcW1y7ny8FKz9o+0s2kkQ8cCfEJKbSSq0/tLewXbNgPuLeSFaSUqAZktA0HuA1 PYJhVQZa01GNHABv3FCycWnKaK7t+0EOGw7TIQP2Pgkkn1ZP0iHRPxSU6ApMS0t17gf3J/Rf +8PuUKPTx6m01tIY3QAmUT1x+6UlLei/94fcl6L/AN4fcn9cfulL1x+6UlLei/8AeH3Jei/9 4fcn9cfulL1x+6UlIrppbuOsmIQqb22uhsERIc0gg/AhEypvq9MDaZnXj4KvhYbcQbKw1tYE NY0QBrKSnSHCdMOE6SlLM+sX/JF3xZ/1bVprM+sX/JF3xZ/1bUlNn/0gkl/6QSSU2kkkklKS SSSUpJJJJSkkkklKSSSSUseFWVk8KskpSSUhKQkpSSUhKQkpSSUhKQkpSSUhKQkpSSUhKQkp SSUhKQkpSSUhKQkpSSUhKQkpSSUhKQkpSSUhKQkpSSUhKQkpSSUhKQkpSSUhKQkpSSUhKQkp SSUhKQkpSSUhIEFJTZHCdMOE6SlLM+sX/JF3xZ/1bVprM+sX/JF3xZ/1bUlNn/0gkl/6QSSU 2kkkklKSSSSUpJJJJSkkkklKSSSSUseFUtsFdT7SJFbS6BqTCtnhVSJaR4ghJTzzfriNm92D YwhsuaTG2eJ8ii0/WPJL/wBNiPax59kiA0RPuPc+C0BhZAcPdW9ji02hwBJ2+ad1WaXOYzIb G7cAeRqkpyq/rTlWH1DgPZTt3Nby8wSDPgNJVzE67bkb3OwrK2MrdYHTO4tg7R8Z0Kt7OpGP 0zAI101lJrc8vcx9jSzaYsECHdklORT9asn0y63BeTG+W6DaTAA8UV31ku9I2jDe2uv3WEnU D90g8FajGdQD/wBJYw1gQYGvHKCa897Nhvqc1w1aQDI7z4pKc1v1nyXO3/YXCgsD2RqXTMmf 3fNXum9Ytz7tjsR+PWWlzbHHQkciPDwVkszg2tldjJEy6BG3sITbc9wkXsLTwYSU2klSNPUg 0h17Bu4+J8CjCvLFxPqA1GYHcaJKTpKm2rqQn9MwgmYOvdOas9217Lm/wSU20lWLOobWNFjd 8E2P0iewClWzNl2+xhABDY7u7EpKTpKiG9UECyxgkwTp4cqQq6iWBrbmQfz/ACSU3ElUa3OE TezaCBPM+SeyrPeXbbmtYT7IEGPApKbSSrV1ZrXDfc0sHPiRHdRqqzgWn12vYXS6dSW+ASU2 9UlU+zZwe9wvG0n2NPYJCrqO/W9mogD4d4SU20lVDM1zXV2XMJcIBbpDv9yYUZzPay8Ob4u1 ISU20lV9HOcx7XXNkgem4CCCDrKgKeoa1/aGagknvJ/gkpupKkWdS0cLmOPAAiI7lOK+oAlg urMCQO8+JSU3ElXczN9Nu1zfVDSHHsSeHIbmdUaWgWNfP0jEAJKbiSpPb1UH2uYdxA07eZVu oWCtotIdYPpOHCSm2OE6YcJ0lKWZ9Yv+SLviz/q2rTWZ9Yv+SLviz/q2pKbP/pBJL/0gkkpt JJJJKUkkkkpSSSSSlJJJJKUkkkkpY8Kq/b6bt2jYO4+StHhVoBEHg8pKcsV9OBbN73TJaR2A 8VNo6aHiwWu3TMkcx2IV4UUDUVtHyTmqk8safkkpovHTX2Gx1rpJ1EmNUxr6c3aXWPLXgkGd Dqr4ppHFbfDgJelTAbsbA4EJKaLxgNoY11j9thLmjufzSlZ+yyd5sI2ANBGmg8FdNNJia2mN Bpwn9Gnj026+SSkAwsd9TBuc5gktM/vJh03HGku29hOitABogCAOAEklNU9NxyQdz/aIaJ0H wUq8Gmt24FxdBEk9irCSSmszp9LLPV3Oc4REnQR5JM6fSxxe1zt0OA1093krKSSmqOm0ANBc 8lveYlI9MxySdz9efd4K0kkprM6fRW8PDnEtJIBM8pV4Fde4Nc7a5u0CePNWUklNU9NoIjc6 Drz38kx6dWHMcx7mlrtzp1mFbSSU1T06kv3b38kxOkuUjgU7G1tc5rWncIPcqwkkpp/syuZN jzqSdfFSPTMcgAl0jvOvwVpJJTWPT6TWa9zgHO3Eg6zEKDumV7m7bHNaNXCdSfFXEklNJ/S6 3HS14BPv11Pw8EV2BQ/bJd7Who17BWEklNYdPoFbK5dtrJLde58UrenY9rnPcXBz+S0wrKSS lAQABwBCSSSSlJJJJKbI4TphwnSUpZn1i/5Iu+LP+ratNZn1i/5Iu+LP+rakps/+kEkv/SCS Sm0kkkkpSSSSSlJJJJKUkkkkpSSSSSljwqlpsFLzSA60NPptPBd2Vs8KpYzfU+v99pb4cjyS U4D+ofWIVsZjUvtLmF1uRcwDbYD9BgaYITP6712q2mqzBa2y57m11w7cQPnp4ypH6v8AVziN xBmVtpA0YNwgj6ImfxVu/pnVX0UNZmg21Nc1znAj3OEBwI1MJKQDqnXW+mbsNrPUc2tjIcHO c6fdEmA2NVuVh7mNLgd0a6Rr8Fz9fQOs1EP/AGi5z9HWOk7nODYEToo4nSPrBbWx2RmOxiZD qy4ucGz4/wAr8ElPRwQmVDpmNm0l78p7nAktqa90uFY+jPmVfSUpJJJJSkkkklKSSSSUpJJJ JSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJTZHCdMOE6SlLM+sX/JF3 xZ/1bVprM+sX/JF3xZ/1bUlNn/0gkl/6QSSU2kkkklKSSSSUpJJJJSkkkklKSSSSUseFUe9t dbrHaNY0ud8ArZ4VV7WvY5jxLXgtcPEFJTnN+sXSfRNtlpoIEmqxpFkRIO0TyCpu670sbQLg +SA6PzJG4bp40Sb0HpLdkUSWAtDnOJcWnsSTr5KLfq70Zm6MYHf9Ikkk9vFJSWvrHTrb66Kb m2uta5wLZgNbyXE8KFfXukP3frLW7SWjdImIkjTjVSo6N0zHeLKadrwwsmSfaRBkfBDH1d6M 0QMeJBaTJkg9klJXdZ6W3T7Q1xPYT8zPlKh+3ukm0VNyGuJG4nUADzJSPQelek+ptO1r2lvJ O0H92fgos+r/AEllTKzTv2CNziZcT3d5pKbFHU+n5FopoyGWWubvDBMx81ZVXG6V0/Ee2yik Me3h0kniNSVaSUpJJJJSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJSkkkklKSSSSUpJJJJSk kkklKSSSSU2RwnTDhOkpSzPrF/yRd8Wf9W1aazPrF/yRd8Wf9W1JTZ/9IJJf+kEklNpJJJJS kkkklKSSSSUpJJJJSkkkklMTwqt/qtotdW0mxrHFgjlwGixLMXK6j9Yc+j7dfjVY7KyxlRAH uGvIRf8Am9b/AOW2Z/nD+5N4j0DOcMI1xZREkCVcJPzC0H7Y+sGPTtu6eb7m1scXCRuc86jQ cBSr6z1sD0rOnl17nHaQCGBsx7j5BFb9XrnAOZ1fMc08FrwR94CX/N66dv7WzCRqRvH9yPFL 938Ue3i/zw/xCp3V+rMwLcj9nk313CplAnVs6uOir0fWPqV11NYwPbc8tadfotMO7dlZP1eu bq7q+Y3zLwPyhRb9XXESzq2U4DSWuaY8tAlcv3fxV7eL/PD/ABCwyOr9arz7a68Evx2OFbSQ Y/rlwHdOzrHWbRtb08seRpuB8T7gY7Qif83rv/LbN/zh/cl/zdv/APLbN/zh/chcv3fxV7eL /PD/ABC1B13rdwIow/ZXZ6dr4JdxwPOVZp6t1myxrT04taHgWOMghsgHtyOVIfVy0aDquYJ8 HAfwS/5u3/8Altm/5w/uSs/u/ir28X+eH+IXZLTOgMJtrvArH/5u3f8Alrmf5w/uS/5uXf8A lrmf5w/uS4pfu/ir28P+eH+IXY2u8Cltd4FY/wDzcu/8tcz/ADh/cl/zdt/8tcz/ADh/clxS /d/FXt4f88P8Quxtd4FLa7wKx/8Am7d/5a5n+cP7kv8Am5d/5a5n+cP7kuKX7v4q9vD/AJ4f 4hdja7wKW13gVj/83bv/AC1zP84f3Jj9Xbv/AC1zP84f3JcUv3fxV7eH/PD/ABC7O13gUtrv ArG/5vW/+W2Z/nD+5L/m9b/5bZn+cP7kuKX7v4q9vD/nh/iF2drvApbXeBWN/wA3rf8Ay2zP 84f3Jf8AN63/AMtsz/OH9yXFL938Ve3h/wA8P8Quztd4FLa7wKxv+b1v/ltmf5w/uS/5vW/+ W2Z/nD+5Lil+7+Kvbw/54f4hdna7wKW13gVjf83rf/LbM/zh/cl/zet/8tsz/OH9yXFL938V e3h/zw/xC7O13gUtrvArG/5vW/8Altmf5w/uS/5vW/8Altmf5w/uS4pfu/ir28P+eH+IXZ2u 8Cltd4FY3/N63/y2zP8AOH9yX/N63/y2zP8AOH9yXFL938Ve3h/zw/xC7O13gUtrvArG/wCb 1v8A5bZn+cP7kv8Am9b/AOW2Z/nD+5Lil+7+Kvbw/wCeH+IXZg+BTLm+oYWV0u3Btr6jk3C3 JZU9ljgWlp57LpT9I/FEG70qkZMQgIyjITjO6NVs2BwnTDhOixKWZ9Yv+SLviz/q2rTWZ9Yv +SLviz/q2pKbP/pBJL/0gkkptJJJJKUkkkkpSSSSSlJJJJKUkkkkpwunf+Kfq3/F0/8AUrQu rNtNlQO02MLA7wkcrP6d/wCKfq3/ABdP/UrSse2ut1jtGsBc4+QTY7fUs3MfPH+5j/6IcJn1 YvoxxTi51jIDZ3ExI+kY80mfV/qldttjOo++4xZYQdxaOD/WWhR1zpdzA51wocf8Hd7HRG6Y PaERvVOnPa91V7bSxhsLWanaO6cwuc36v5Ho5TH5AfZlVsrLnFxALHF26PNG6X0a7BLy+xjt zSzayQ3vDzP52uqMeu9KbW2x14G6Dsn3AO4JVi3qGBVZ6VuQxlhaHbXGDtPBSUiGHk/6Ydtd ZBA7J/seSTudfvfpO7QAj4JO6x0lhIfl1tLTtIJ1B5hM7rPS2uDftDDPLgdG6TLklM24twY9 nqAb2gSJOqGcDIcRuvMNgCCRp4KwzLxnsa9lrSx4ljp0MeCkLqXCW2NI8ikpruxMk1MqbkEN aCHCOfmp141zHNO8Q0zOpPEIwupPD26acxql61Wg3gyYAnkpKab+n3l5c3IIBn2690VmLeKn 12Xbg46acI/q1fvt5jkcpepVp7268ajskpqswchu5pvmp0+z48apHCvMzdM6AyZAiArIvoPF je/fwS9endt9RsxPKSmscLIcAXXfpB+cO4ngomJi2Y7nl9hsD4ie0Irsihgl1jfHQzp8k4up cA4WNIdwZGqSmSSb1K4ne2PGQotuoI3CxsfHwSUzSUfWpBAL2y7Qa/NM7IoYNzrGxIEz3PCS maSj61W7bvEnWJ7KJyKJjdqJkR4cpKSJIZyKGxNjdRIjXhO26pztjXS7w/FJTNJCOXjBu42A CY85ClXfRY0va8FrdCZgJKZpIYycciQ+QPj8ErMrHrfse8NcIkfFJSRJQZdTYYreHRrCmkpx /rLx0z/w7X/FbLvpH4rF+svHTP8Aw7X/ABW076R+KaPmP0Zsn8zh/wAP82wOE6YcJ05hUsz6 xf8AJF3xZ/1bVprM+sX/ACRd8Wf9W1JTZ/8ASCSX/pBJJTaSTSEpHikpdJNI8UpHikpdJNI8 UpHikpdJNI8UpHikpdJNI8UpHikpw+nf+Kfq3/F0/wDUrRsa19b2OEtc0hw8QVi22dS6f17O yasCzLpyWVhj2OaNWiDyUX9tdU/8pb/89n96YJAXd7no2suGczGUeEjggPniNojuULOn9EJb Vbiu3BuwOc4uLg4cOPgBwpY2D0zFuseKXF9rNjg46NYRthvxhE/bXU//AClu/wA9n96Y9Z6m eeiXH+2z+9HjHj9hWfdcv9X/AMMj/FG7p/RH0Gv7Hua0zYwkyD8e6KMTpedlkW4xLn1hrnuO jms+jKb9tdT/APKW7z97P70v2z1P/wApbv8APZ/elxjx+wq+65f6v/hkf4tir6vdHqc5zccF zzLy4zMoVf1Z6Qxj2vrNm8ky48A/mt+Cj+2uqf8AlLf/AJ7P70v211T/AMpb/wDPZ/elxj+Q KvuuX+r/AOGR/i6DcHFbW2rbLGaMBPATNwMZri4AgmO/EKh+2uqf+Ut/+ez+9L9tdU/8pb/8 9n96XGP5Aq+65f6v/hkf4ug7BxXauaSeJnsm+wYu8P2nc36JnhUP211T/wApb/8APZ/el+2u qf8AlLf/AJ7P70uMfyBV91y/1f8AwyP8W+On4nJYT8Sl+z8PZs9P2jgSqH7a6p/5S3/57P70 v211T/ylv/z2f3pcY/kCr7rl/q/+GR/i6H2DFgt2S13b+5MOn4YM7PxVD9tdU/8AKW//AD2f 3pftrqn/AJS3/wCez+9LjH8gVfdcv9X/AMMj/F0GYOKyNrIjjVRPTcUvLiCQfze2qo/trqn/ AJS3/wCez+9L9tdU/wDKW/8Az2f3pcY/kCr7rl/q/wDhkf4t92BjFgYGw0RwdYHZP9gxJn0/ lOiz/wBtdU/8pb/89n96X7a6p/5S3/57P70uMfyBV91y/wBX/wAMj/FvHpuGQ4BkF3cHUHxC Q6biAEFpIPiVR/bXVP8Aylv/AM9n96X7a6p/5S3/AOez+9LjH8gVfdcv9X/wyP8AF0G4OK0y GanTUp3YWO5xcQdx7zrqs79tdU/8pb/89n96X7a6p/5S3/57P70uMfyBV91y/wBX/wAMj/F0 BgYg1FcHU7u+vKk3FpaQQDoSYJ01Wb+2uqf+Ut/+ez+9L9tdU/8AKW//AD2f3pcY/kCr7rl/ q/8Ahkf4uh9gxJnZrxz4pzhYpaWGsbSQT8lnftrqn/lLf/ns/vS/bXVP/KW//PZ/elxj+QKv uuX+r/4ZH+LojDxwIAIHGhSswsa1257JPCzv211T/wApb/8APZ/el+2uqf8AlLf/AJ7P70uM fyBV91y/1f8AwyP8XRrwsWp25jNfMoyyP211T/ylv/z2f3pftrqn/lLf/ns/vS4x/IFX3XL/ AFf/AAyP8VvrLx03/wAO1/xWy76R+K5vOu6r1O3CrPTLcdtOSy19j3NIDR8CulI9xPmlE2Sf JOaJjjxRNWOO6IPXwTjhOmBEcpSPFOa66zPrF/yRd8Wf9W1aUjxWb9YyP2Rdr3Z/1bUlNn/0 gkl/6QSSU8/9bNv2ymY+j33f99WL7P5P/TXjKSSn2b2fyf8Appez+T/014ykkp9m9n8n/ppe z+T/ANNeMpJKfZvZ/J/6aXs/k/8ATXjKSSn2b2fyf+ml7P5P/TXjKSSn2YbP5P8A00v0f8n/ AKa8ZSRUX2b9H/J/6aX6P+T/ANNeMpJIfZv0f8n/AKaX6P8Ak/8ATXjKSSn2b9H/ACf+ml+j /k/9NeMpJKfZv0f8n/ppfo/5P/TXjKSSn2b9H/J/6aX6P+T/ANNeMpJKfZv0f8n/AKaX6P8A k/8ATXjKSSn2b9H/ACf+ml+j/k/9NeMpJKfZv0f8n/ppfo/5P/TXjKSSn2b9H/J/6aX6P+T/ ANNeMpJKfZv0f8n/AKaX6P8Ak/8ATXjKSSn2b9H/ACf+ml+j/k/9NeMpJKfZv0f8n/ppfo/5 P/TXjKSSn2b9H/J/6aX6P+T/ANNeMpJKfZv0f8n/AKaX6P8Ak/8ATXjKSSn2b9H/ACf+ml+j /k/9NeMpJKfZv0f8n/ppv0f8j/prxpJIpfZvZ/J/6aXs/k/9NeMpIKfZvZ/J/wCmpVbPWr/m vpt/nd+znuvF0klP1L/m/Q/1+SS+WkklP//ZDQplbmRzdHJlYW0NZW5kb2JqDTYgMCBvYmoN PDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0ZpcnN0IDE5L0xlbmd0aCAzMjEvTiAzL1R5cGUvT2Jq U3RtPj5zdHJlYW0NCmjepJBda4MwFIb/yrncLiQfmmihCP2YnRfrSiNbofQic8E6jBENrP33 0+gudjEK292b9zkczhMSAQYyAxKGQDEEmMJ8jlamMq1oZK6GR8eB0X5sH8fo4WI3wko7gI0g wPwJJKa2fZdlfceHbogYqD9lCiyaYgT0e92uNblQ9oh26wRl6mJRqmWhVid0eH77UPmwMtUE xi2pphBMyQc27ojjfmbR5aq2EM0IWsnmUZXF2QJnHK3VSDxKOEoqWXTgB+7Y5dJcjh7jEXg+ HuRx/xEYhydHE6nL6nqXlVp1sFWfsDda1veObaVWyJEeuH4nnjKHhG2Vzc9oa1otK1e9jscE GKPUyqrMF3VRKcBIWKVfIKIouzbKjQ7HtmVjTYsOk0PA/H8Ksp+ClP9N0Fua6v2mZfiLJfH5 bc0vAQYAPK3GLw0KZW5kc3RyZWFtDWVuZG9iag03IDAgb2JqDTw8L0NvbnRlbnRzIDggMCBS L0Nyb3BCb3hbMCAwIDYxMiA3OTJdL01lZGlhQm94WzAgMCA2MTIgNzkyXS9QYXJlbnQgMjcg MCBSL1Jlc291cmNlcyAyMSAwIFIvUm90YXRlIDkwL1R5cGUvUGFnZT4+DWVuZG9iag04IDAg b2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMjQ3Mz4+c3RyZWFtDQpo3txbzXLb OBK+6ylYNRdwy2TQAAGSqampytrJlOewyUyUnYMzB0WiHe7akiNKSeVBdp93u0FSogDaJGw5 k9lK2bR+2Gz0z9dfA51PEwjKYKJSHUgdRCrhQSp4sC4m0rxzM/n9b8Fygu/mIuYy0CCCCP+m b/yOHzw7rXQwrwIw/6o5vvPzWwiuqub+jsDLya+7D/8+nTybTgXeMr1E4QmPOcqtLzwA0DEE WRJzHUxv8POrScw5T4LpHF9Mv0yY/PnNm3D6LxICtRARQyoSvHl6Rt+ZT37EO+RP9XeaB8VC 8OYrF+xjWYUAccY2dAG2WoeRigX7Gv4x/eVAcJqDru/ql5nk9acRKSno2RdsU94UoYo1SRdx wmZhBOzDdWEJl3HO09FKk3ygr7HZcnG4fIiVyMWgJNmRZDRll+Vydm3LSnUOo7WKdmpdsDWt NmVFtb3etEtNWi9DFkT4g39oHiuNIRWLxsGkyX/Cgyfgiva6ZrX4t2hNhS6bXZHPFCscXwnQ g/aU7VeYPFx4rHj7Uf+S209xyQCq1unLCl3LUSmMH1x8zv7tKMWllINK7Rera8HzEMViXIYQ S7YMc/y9CXGFrFxui4X1EMyVfHjlHY/ldRxtLAtkfLSq0S4nL9hpGKWo2TTEX/BDxk+cOBe5 lw1q9V7PN3ZoJsNB3vFSG+WCg7DxgosRobLTCMSdiSePYTJ4oMmkreIF+8cqJCD7bAmEWIth gQPW2yezwmSmDAVK4wwxWx1k83/vyeZa6llZzbdVVa6WhxZNME6z4Rx2tOzFxEFBwvXM7MrA mGBFcVNg4rGNk2zJCMEdqE2NgvZCIeZKjBUT7bLigr2+LVDDHIF2FmKlRP0iQOApl1cuKiTJ eAtACz1vv1abIoxyduNgWTaiyrgaL4owQ3Wx2JQbKrOobIjFES3i1MO21t6DYnuTiDbmLxGF BRlh7UT9sMDWmZ0YODs/o1Kj2Qsyw4ljBsnH2jVua7ZIYgni5DAGZDxCULY3aANDp785oZRq j4hsxKDHMwcWpU9MgmhCZo3xkiLmRAJZXM40hqTEouhaTuiBBUdSxzpHMhrjrzaOGgIw367X NWvDxMwMvYoQ1PD1Z8yEnFFeEEEgVHluPVpj1iY+odBwGnwc5hE+RxBNvKBck+wUnFQDy5My FZZ0yTPbAyAUh/SPQ3QlHqHQTPgksRN4L6I2TnixWN2GaJTKTdtBvIIuokrzxG1VOOUXhI8J G+C7tFmGFD5B3wD85qOjjlTaK3sal64aAFUIoARGFEXoWxdAiZ97lBDImwdUXw0pVKwKI+ow ogzFY4ZAiu/1gCp4JW9d7irbqOlYZMZVH97a1tvB+tCk4ZcZJp/bKiHDGL8Q8kcdHpuVvZJh r3ajtWXi22XxaVsSEAhG5QAvc3Svab4wodj1ta2wilWuvahG499yUTSMvLz86sQMH8625Ami uy22s9vb63KOOHDIDpxiizRmWNHOA+ximz2q2D5y6ZFM40RZVaKOp9vt+nZVFZVdadNh0ibF UbAr6dkQWIeCm1jUaLhLZJWX6COHVmR+zLfG6Q+zqljYdTzxSkXQbR1fGZSSbItXaiM25rVG wkavATvR+v0rt7+XZhenvvBAJILCARTc3+bLTOwrWZ3L7PVbOyBADDNZ2d0oMUSOVbfFvCRL 26xLDPMl2SmwDcS8qFOLmMcspPqB1rkjt1SeKJ8nNMTzvEaWlJClLNYOtqQJ5D5i01rsezJp VvNZ4i+3t+eL9+FzFxEIRYbEt5i5j8CZ29rwRPv7a4esd68fMj8Fm/ybVdVqXpLTKKSRP7o7 KEKL1Eu0qYbsS7n5aK8+43qYaqrsrnKc5vKegtx1b1OPrrDs5YguRcjZ0kEV0Cr38oU4KCQZ xktrOKKk/aUklzDcuAl7E6B3P2UI+fMYUsxIzDyVqcN83y7LT9sCC72V7wpAeamXdsIRuKnz ff21FEJ7xUx6d8XLE5/E/hY+0rsAL5d2fVFaCK+gOsrKox3/fffSLRG5hxiRQIfNEP3vYTNq xBZhu0bvNHa29Y+Sx8rlHnW7o03RysyJB4aI7m93QPj4AtJs3/AQS8B+pw1C3jQ8nV2ktr+V nHbQNDW4kGedHvcecoBPU6phuP9ERq+I5l+ba0ZkRVEjV9BrUgLfVey5Y8F8xO7GQbrWGfCj y0cw+uFP5CPfIvvVQUXOmor806vtGpPYTpZ0XPlUbi+1KAwZXpabsm8/UEA6WmsSK+6g7SJX 3rzpCGjVBzORUEhwbsxrZY4GlenTnINHzb2A8Xta+nfF5alZlCrJLMrwREl0ACBPRWvrA7LS 3gTygqXultiH4mtodmxXIeLocuFuakgh/RnUMep966dqHlI1wWrm9s1qxJFRro+eKlmzRtsP ECeZzB8A6LsY74vG2K6jtCOdKvCqo/uqNnVdM4Ym/9XAzd2YyNG4IsBojTOzMfEk0frdkK79 LrPg8k9rydVxoEsdgWs3y3q3NGQ7NYdGdBRfzdwdYkR8BaOZGcnE9tNulfIkuW+spK/vPD/b 9Z1kckwmjZq+Z+/enZ+9D52TrVGuVc6ujXuEAP5SGsiydyAlOlSnD6lpVqsZp0oNgDtNjqVp ZtX3uk88fzl95ZD3HPx61ybhfntljrFPnUZRyeEDC20PcSUgeoZS7uQy7uiFFAbI9qMXd54R snPHqOn9M23uWMSqmYpYOBAg9hvn4/b9H37u0zmMatqT2WcCQUknPkCVpzQnz4ot3PY585oG edSxjAs322p2hfwFWB970eOHCY5wpupz/kdn0XQUvT9mAcj3R/7A0fRXxuTCmJ7OOKpNMwq3 Nj6RrOeITH3zgNmdkt/MymVTkoE3s5mmMjtaqm8XMN1Tsbpvul1VVUkjoxasyiHsMkQH7dv1 mWrqymdaLJWSa7wm6LOtuUpDGxKMTnd0QHlpf9yJnP/L0/9IUNK4836DZwYmqeouVh8efrPS HuRU2mvWpQVTGiAxNnHjIP0rj5BAs2mM9MmZZGzHkhOpYq+pZL07FDRjR9iahgkCyWcEl9w9 YMJoUqMnTh85ons4xak6E6eSJk6B/aCykx4PD+mHkczp8W0E7h19Vszdg5wRy5XyCYZ1G4J1 cfqmBzLSwSmtnhFYEDwDYc9pYTnPrSmt++JFNn5YrQ2VQtCdm/98QPvW1OL3DHWDxwjwk491 i0fOKJt5wYZKvyI8pKV/cMpD4pMk+5iRJ3bQIJd+SNCAEzTJw4IGWwjFTcy8nE4+4c0yzWJN xx7UzQkDORnNAkmFzDUJ5jeTZ+c3SXC2mvw6+Z8AAwD6qk5LDQplbmRzdHJlYW0NZW5kb2Jq DTkgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA3ODI+PnN0cmVhbQ0KaN4A AAP//AAAAP///+vr68nJybu7u7y8vOrq6vX19bS0tFpaWkZGRlRUVFNTU01NTa6urv7+/t/f 34qKikVFRWRkZJGRkYyMjIuLi5WVlXFxcS0tLYCAgNLS0n5+flxcXKurq+fn5+bm5u7u7r6+ vjo6OnBwcPDw8Pr6+vn5+fv7+/39/dTU1ISEhGhoaMLCwtfX13Nzc/Hx8dra2sbGxsjIyMfH x+/v7/b29vPz89vb28XFxdzc3NjY2MvLy+Pj42lpaUdHR3R0dLKysmtra15eXmJiYllZWVZW Vqqqqvz8/GdnZ1BQUGNjY2BgYF9fX7m5uV1dXXl5ec7Ozvj4+KGhoWFhYU5OTu3t7cDAwNXV 1TAwMGpqalVVVRMTE6mpqSEhITY2Nm9vbx0dHfT09ImJiT09PXJycm1tbUJCQqOjoyQkJGZm ZhkZGd3d3Xp6elJSUrCwsMPDwzw8PKioqDU1NY2Njb+/v0FBQW5ubvLy8oiIiKCgoOHh4VhY WNDQ0ODg4Ojo6Onp6Xt7e97e3klJSdnZ2UxMTLa2tp6enkNDQ7i4uEBAQD4+PkRERH19fXx8 fPf399PT0zs7O5qamq2trZaWlp2dnTIyMikpKTMzM7OzsycnJ7e3t6SkpJCQkFFRUczMzOLi 4q+vr0tLS6enp5OTk6ysrM/Pz46OjmVlZcrKysTExLW1tcHBwdbW1uzs7M3NzeTk5OXl5U9P T4WFhWxsbJSUlJubm9HR0XZ2dpmZmVdXV4+Pjy8vL3V1dZiYmJKSkqKiopycnIaGhnh4eJeX l0hISKWlpbGxsYGBgRoaGoeHhzQ0NKampoODg5+fn1tbWz8/P3d3dy4uLrq6ukpKSr29vX9/ fzg4OIKCgjc3NysrKx8fHzk5OTExMQ8PDxgYGBYWFhsbGyMjIywsLCIiIhwcHCYmJiUlJSgo KBQUFCAgICoqKh4eHg4ODggICBUVFQMDAw0NDQsLCxcXFwICAgYGBhISEgAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAIMAJvlfZ0NCmVuZHN0cmVhbQ1lbmRvYmoNMTAgMCBvYmoNPDwv Qml0c1BlckNvbXBvbmVudCA4L0NvbG9yU3BhY2UgMjQgMCBSL0ZpbHRlci9GbGF0ZURlY29k ZS9IZWlnaHQgMzg3L0xlbmd0aCAzNjQwMi9TdWJ0eXBlL0ltYWdlL1R5cGUvWE9iamVjdC9X aWR0aCAxMTU3Pj5zdHJlYW0NCmje7Jv3X1vH3udfQy8CiU7owqBCtxASHVMlEAgjamBJuKKG pcgYjOiiG4wBU5Jw6b33ZiD05sehhAAOzsa7z713n/vsn7FHNFdExzg5nx/sg86c853znZn3 fKcBAAsWLFiwYMGCBQsWLFiwYMGCBQsWLFiwYMGCBQsWLFiwYMGCBQsWLFiwYMGCBQsWLFiw YMGCBQsWLFiwYMGCBQsWLFh/SvHxCwgI/rkkIMgvBBcsLFhfiIRFRMXExRF/KolLICSRcNHC gvVlCCUlLSMrJ/+nkoLiV0rCcNHCgvVlSFlFVY1PXeNPJbTmHS1tuGjPJQwWc+uExZ2SaSQO e2O2eAt3+7y3r+sudvyVVD4dXT39P12LMhAzNIK5cg4Z3eUnGN86EY11THjlmmQAJbkiEfgN 0Bf1HpJsanwL3Qc50Myc17QE0sTikvkmWlpdxbyHjq71nw9CFjb3YAidQ3hbO1V7h1snGUcn CpVHti2dXWhXZctV1U3tou7D0u85utNun/9obi73PRgn55vh6WXveqkCsveW87kSCOn5/uka lZ8YDKHzCKPytYu/otZtk2HA/zAk8ch24DffGl5RrhWDnP5meFH3MYNDbJxDb537tELDvg2P 4BFLGtl/5xZ0GQeGRv5PiSgYQjCErkKM6JhYDfStkwnrQSivcox7GG9yZcYSHiVedGTBTnJL Trl97kOjhYLtPflOzjc61SXtcgWUHhNjDkPo/BDCaAtl3Iz4jHhOdmK1OVdgg029Cghluhvf xnLMyjbktcBACYm4Ols5uUEXhpCUdR4e3EblR0bwgpCjO9/l3k/1coIjofNDCEd0Dg+5GT1W 9OOVyQKHwkubeFL09O4VzAwyikU1S25hOZZK84xoKc/Krs6WR7bWxSEUWX4rI29chQxPCIk6 pl/OgLYqDKELQAhd+f33TjejH36s4rVEqvJN+KVNxPxdrPoK6AFDCIYQDKGbg5CVglcN9WZU W6fGPjmPyCCx+kubYMvTKFewIwqGEAwhGEI3B6EGhcjGG8pFmbgaj6qJTGzKubwNhUiKyeXf AkMIhtCFBEPoZPGKhCpozTeUixZEK69ISCu77dImhNs71K4+EqJmWPom+CZoEsw/JBMG1cny TUhI6MogRamfMO2OaTCGnvW1RJ/BMJUTlXH4Gm3lgu4eq6uCECnd4ADOGp0GZ5u6v2EI4VJ6 M6iA6+iEBJYpHgAT5Z6EBF9NfT9hck7f54QQ3srvYG8Rp9/8tOn2m4cQbsDjnVwx7g4eXpEt Tj2zzujt0fQlGusnaPphTzc0wLIVIV5mExQMoUtBiEmJsRFHxOR21HA+SMgn5SJRh6gbsmeZ DzefYNinIrsJ4VJnT2Gc3qhLRORjD3xkIjki9ggxmoW/GghxAu91c81r1NLGmLcRQuyWREky slHcBhFT55LZTwUEmccxkM9FZTXGnwt+TgjhKKH13FJomNCLOI3fNw8hdEudLvr4L/Viz6NX 3BM57dE+2cm6Oolcl7oh+VNHD/jBqaFnhZOBjIsv+8AQuhSE0FJfd0zUtgfn9394DLjB4SEt uKVdvgVV7xh8QtejofjT9MxssJtq5enrv4y5xPn9CoHscbJPjgt2WFC/CgghkcI9MdEpAGQt PF4s/chBeHbJZ4eQT1B4mTa24one0uxU4jKtFMQ+kxidbQ9W6GFq2qx8PghhAX414EUp1L5r be51fsK1eORnhdCg43/IeBwHMg11Lw6vjG3GTnuUTJ8dffnkZ0M5udhTj7cPjDWNxDVb269d PCiFIXQpCPWtP5BkGGmbMLn1LaXTmDt3hey72+uhjnIV21Ana6P7ABHB5QVTmVgPFZNJgxBU eVMyoHQm5jqJYsYMZp/IkIQB9HeGJcGSG9RSB/q7Dk6CkT2IpfulQ+617FwyrNz/UXuubgZ6 ONRG57IQwqR5VrK0AV90zBowknu46WEyUVsw+F4So/Ju7c8OoZFfxrRJLS6xTG2ftK1fN5hq IcPCZG0TNh4IFM5BCTj8RB0yVF+zcADTlwWhJMOKcd0QMi+YjSODdKnsMsCU/zmAxdkeq9F5 /xFjzazPCSESa+eOlsJBrqOIph5NStAF3sA4vSB8DFAHLUrboK5Rg7/TlDvIJ+kYE6K4hWqi Y1Y/gANMH3a66o6gEJ82aYBbV4UbfIR9tAfbOu/uQ4lswGo7olNacWQCACxVe4vrhxDTgjfp 8OgsKxww6u2HlPbuALG0dcWXfS0QYpgftpgM5dMjieuBkI9u4fZRofdW6L6sJRgBYVulF5ks VORO3MFBCqJ4Eh8SLbKQtLCmQb27sjoAfOLHjICRwMTudK4f9HkW/kN+QNg8IinpRUQUFd+7 0f7y5RxUgTlVwVJyImgqyCiXjw9OjNzYzz9HYAVCFrn4khCi9pnTXzVNegoBbMJmWGmctDcd 5Og9ciirb3in8/OxVkz57BBKDJ/XLmkR7+L+0f1MKkPt0dThLcHwGgAMKpWC5WPR+NYpIZDR qguVh9rGuWcozgUhdoq+XOSOCpS+DWGo0/rgt1WslZx30zAL9U4Ns5qKTvicEDKNt5drVxXg Nt222nXP+GdJUJ/SJfWyRuVOBODkP1VZV8ag5l7KzxoL44W74qVe1JoxAV9srdTCLIHLJSbN pZ+b7+Q1KJpCKRAytuPG2uXjBUgAmbFaqxtse9j4TGM1IUf0Jrr3XjuEcPzDzeq8XlRCnPIk A4/irT0lJZW5qKOGyq4vdhmyaxW6DgiZLJUZQa0BbzHWYvq5ILQQsjFonmOgAYD+iOtS4L3U GjA4/ZuoFis9Unq0FGWRxQTGAUlMbQXHaLUW1efmUevTncAjRLoT06n0in5fOm8ApTPjXjwI PEb8k22lJDJ9TNpdN6rvNQVCgPMajX3pX8nBrQ2Fxq0/Xk7eLymstgkGMJq9aaj3ITRN5pFt tQ8hVGIpb++o2OwxANUwUjtC0aZulQmYOuULDt4jVerHjFF31bv7CQgpXtR9TPkLQwjRA11j Kp9NkMsLo9Oz7hqgsEDw8QrgC/KubSxOHRWajVEGbfa/1gJwzxl9AQjV8CCX9uY7EPJZGRF3 bd82hVynLdvhVuS0wgaMrPr8REeZspzjuSHzBcXq9yA0mXUFEPIbtu45W0oBhxdR1dLz0FVe R0fymNg3ELnX7BOba1//3gr4HZ95qZiPJ4bVULYU6eSerS2KZ2SkB+h22BMYzb3PxTFTps6D 24DDHKCKRoxR4wTbbE7E+Vt3YYTy3fds2xFSB022xISEBIz43AWNa4fQ3VlEQCOvF5HX6oL6 QGyh67pKcaK3u/7hzyKpk1Jz0RIK1wEhcrR4LJR5Cy3v+VPn+68JQibD/0t6esRarwaDl38w mzNYJUbr1VH9IzlBo0Hm953IoI7QNbTlZLCRcowjS8Nv8YknSkHClhHx5tdk7UqHlbTQv4lP a8k8lE5mAkvDNTTubkydlY5odgIwliX62MY81cCZRqvqGIyotlr5yrhsHJeUSWzuZgL5fQgV 88p2d8jE+wwqzy1apBgfzhjop/4oXn4QtkUVKMgg1vd3RCBT5g2tf//R+f5SGv4DCG1d2H8t 1pIXghBDIaRDXl7q3vJQD7L81zdaidYdUhpAsChQWCQ3yI/D8q8jVuaq4RK++t9J2AyvSPZ5 84WrcC7nsV8W7/oWQsaZCP+K7cPVSYOw75ZbD+bzmV0RoY9difsUUp8K888t2lyMV34LIdVL HvzYV4pcUP3ZUpZJaIIs11dZQDj6F8/00hdv5AG6w0ZkoHPk5ziw/aCuilha6z3HFibYq6jP /rKYw+6uvcvZeybHUB+r4RYRm+bCnXUviR5qZZNrvKsyot9oWVjV0F410EVVlPGmdjL6xyGz xuhju1LGhT/qrBCK0NN7qLLvXyoe42NyWCu1+44Ljj3/xFUIzL1usTQm7Eb/EW1w0GaDQyZQ bLPsSHXklULIIrnWEuAoEl4okD79JrGNODbn8Z4F/Goz6SYgtP5/Hvk7d0TWYNn3cqGmW6KU WkOItEcD0OD1d2mankPYGMcyVUpje1kKSu2bupUjYBNhrhSW+mJwgWbO8f9PF389GUfEegoQ Ekjo6tKcdNcwMMweLtBPozYo2agk7CbY3aHXOM2hAWnMP/94pcJs0+WDHsGvKFWAQCScpPUf K9/3RtnXT2TbBg/+IAU+/j3zcKzANNhOfOCftu/CHKVcm3/8cxlxn/X+0k9bdoDZyaaIRB73 BKxFAy8EIezStyGiAeJDXvMcvNoP/9LT66BxISRdnpHkT4cSqdlQBEPXzenf/lprkBcke+6t XNSZ1Fd5J2acWCAtejwsrZ6UzhSMOugCSPTJr/yPJkOsiElv7uTt76NIDyraufPto5gws6On jFQL1XgU0NlEJK5Eeo/ycDBrHH3YNPu2Hm4QVwKaKEBIZpID9S5DuiAH4Q/ljiW2AQTFdKHq SPOe0NzNW3byq0G4Tfh2ppEGZ3IjW3sI+4A9hBB1O1IRlVNcbJC+t9kKAGe9zjL/e6Xt3TzF puGMo9rU+Ni95xKN6owQoj5XpTh2mFIB0mc3UMQ2ooAPGPkRCiQD1+oPP5qdLB3JB5KL9r1u Hr2Tf1BIrRVQkNvn6mWAvzIIIa3qbZNoI7vcaeHHsb3xP9rXM3afO0RT+AfeSTUyib0BCPno /tHMPR1rhLTacjSHxkoTMqO+iv4QhFCuRTOoDHWOCc7YST6lGzHKDSG0Qsfb3GcaR8pfOvfv hRqh/cN7OJCGd/KQJo12Lo6Ov9v7YHxphX/s7KGi7v/20EZ6+Xub2JeIAgwoWQk9hhAyP3zu g2Zm8fj/ujhNnnRmJeDhd+8fYMUPBibWOcgqkxlIICyy+TB7k8ItZeEBW60ml6T6g04Ny9dg 6WTf08ARfr8HUd75RtzxJFOTTrkhYpMn5MTR5YeimosNxyp25M3o9LQMJpIReOcV5HJ1HxzU lsob1u8ToES23ht3Kx3mGmVkZCtfDfec+6wyfuzR69zUkz7K0fsf7g3HHU/CsOrm08Ys7iiE 7lQUk8sddeFLyPXy7pOJK0L7vsJkpLAyrSOs1I97QrLqf2afXEBn1OTk8u//FeJ44mvEc7fa DjaTUbsDvspOzX3zX0+xA/4y0EBhoG4YKG8+hxzDb5MPEhBy0IBN9c0DMWmxf7lbpm84FUrL jA3iUtbF7oR3dFORxxAC6L0m/iqHclLOwhYEGu31IkLzd9/aSEs/uHP/aADmpyRajbkUhKZP 2hwyOCMTeFTrB72sUUuq+doAR1T9I0zK2q2ZnTUcs1kcvaxoelBDyfsQ8izanz7ExD7aOyhb JtRjYAR3EjN45mJUXJLXUqDiOxDCl6QpWNc5r0Rxs93jryVj46ZJBcIG+R0utBkUY591SAZT m+ZiRS7BvwuhyHLyNUAo/LCvy9pyh4IJ0oJThb6hnRAXQrmxB3eITvKoKqcl6Ep/c6Q0RVdq cbN/ZWg2urakz25on5sRYmtkQZpe2Wp3QCoHMPtjZ/SGZCWfIzIDmykRklnB3lARCzdPH0NI eN7e8oN8GRS9jtbV3fuk1nX3xH/3/OABYWVbhXubibFs4Fv0eD5uKBRqLqavNp1fbdBT3jKH TbMb+MgHaTsPXwTvnWBruNjp39kLC5++Gxxd5BJ43qHSAYRGEXQ8g3EQuBUuHd4SFJNMV5rm VrnyokpSj419xWhERcdQxPl7G/zYDuJ50voJXyW/+C/3txP0mKjdymhn+1kjQAh4XBmX/Qri U8rctMPz+QKdt4TVkDJ8d2Ka7f53rZMK6MwaHg57/KNX8ImveRG9oXFQ5xmL4YbB7bPrP9bx 6wTpQQPBQQhCbe7REKIsuRBygiAk4uZU29zcuiGizk4hqE2518XiQNS251NvPV/mWwiBZOl5 Jfcc0Du85Qv9ul7ISn69oNYcSKkROPpY/cwF1GUalZ/Y4kl7IvnGIsuP4B84KY/r9XJtADiB JzbVHgn3VftTwr6eJhIX3KYO+MI8hNB+WIYXfPT07YsEHSdjeYNyycmWV4J770CIU+umJdtq djC+JjV6/+7M2oeCutmqgqLM2P4SnrakYdhX3+kFzb0zVSQ8pbfKAJfWhxDae0A/vFrfEYDq IiJXwGPEGbKbZW+zdtANEhBJQsSYLahhTPyslEHu1nqwaSG4vKMoiMvwt/HAY4VRW9LbZKmv 5iE/e01qaHTXc8Flv6EwCf0CfAP5CkRVogA5SbXyqG2VVAfrfJAvHelIPyurlE+qwaqh4vX8 x99i1L313NbHkvZTMJZ8L6aKDHq1HBRK3wdAy1jGRwNpjx2HFPWUE2wN9FYsrw8Mfvquem8m rfHcEOIu0ZfIuhw16ZLmZ3KHlwLhgeh5BIQk8vrrRsgH/zY0y1r66Sfb85crdca+tm2w4YSv ylB2EX1viR5DqHCWLVGO/HmK6fNqCBrqWixFvxB4rw5n2K6kvfOntnsu66QCOrOsrASfu1PU T34N6nDeCRnV5J0m1Mce2CqKL1Wpg7oszcJhMOBljwL4mgeeQDMmGIDS55NQEMlsLTDaXhkE YPb3+HR9QWFAui89CzUjtpeE5T6ECM56dYomwELFewaqZ3abyjVi3N1ZhNbxo/bUPzF3qUMt Os/Eezw8+j+WR1v1fZfhtKz9OAkVKS1VTxS9I4DFJ+RyZ0Abn835RafmQUNNw5guZTVKIH9D sthbCFG3w18dWUAq39vZQPPshdSLw6VYn8wFV231qdlvi3PA/7+Lpo4+mS3763ftR3esWqT/ tri/wmG0JiP6/75x8pp4ZypQWCoguKft+KX1pkb4i/jro0joydESfbmTSpdBzZCK0F1/PW4k 5GazcrxET+Jsua/pGBu6QJE7ivbd9ECv6+/Fg0Aj6HXLbndje659FFAIUYi6O/fINUXZUE8/ SzBRpb7f3TUhp9zBLqdP3mXJfFt1p/Ko58FrBpd+kK9S6WlejVvtk5sVkRistkfoIzmoJ6d7 0XSgEbb6B+MYjNUnpvx5r46RW2NOXoYgX2R1LKywTLukpW73CEKBIfFH3dvjNTA+2UG0UJPR KwUo/7858IGZv/1GP3+5clfHeOxBMflwnxCSqm4VtRWilA7wxi5uHGpfChPzPq2pTKN3Oz1t VacbXB1jSz7e4tZv/LabnkVrgJSl8eKvUgApH7CU5tvxYxxIEJeCvmFt+Wna+JJTe0al0ytL 09nsFYMW+zGU6YJ1KxRzsx0OIyHOXJNNsjAwzXwoQzSdlcnn47dzLUf50iJ9jxqCxbyswWU+ Kif79b3iT+mpUmL217nD5YPcVPWFDxV1g12+HbYC+pPD0A/0X+J3917wQ+HS/fDVsScP/tAd 91x2PoYQrqrwGEJ4qaFK3oMxjJnov+umVZ4Wf1ovor/PVn5bjW3DhtxkzVKEIA9oR0iLFYZy D0xg0CmWU+7iMgX7FQGZocMv2pTgN/BOtRBeCIkxVDp6Z+bzlwUXmiH6AEJGS6Ksw0uh5o7s XAcFU2SKylMIhQPPVQ8XnDxGyphUj726HcRiNWSTodJUY9RXm1tDBZzhn6UD6uomn/piAb9/ wKT1usx0r1GsV+qkg4oZiUmRacpu0qomg9LM1NRJ1bDmI8yQmsP4P4LQc15nLlpP2jGtHe/Y zg2lyWWbvgB5Ni57ZIfyuCtcjqg4+abc+SGkvZcaoY2J8Ccc/o2tdjyaZTdzXwWkOK1NiTr5 nBJgUpN7HwcoEqHjF4FQxwqPntJo8+Md01ZSAQvcMRpz3UuTTD1t55S26uQlj8Duy2DBmnWG ZA21HXH7F+gpmofPhmv25GTRBgB3ZVOzRRG5BYA/jLtrGjXluJwdo5vGsFLYkfaOVMgip20F OLqGxfFBozbmorXfQWvya6Kl44HFulOAgxttnkNlEuxiHCft53yOqouliqHHZT6KI9cROv0p Pb+vJ/2VzYtVLj+YzQ9tlF4p+eduskBX6gL0S0HhrO+6LhTl8W2FCxbQvNzmUBE2+5HQ/tq8 0Gih3HHxjoin8M4DtdP9n7mJW8+nP61ow5923kIIb4Tq9FR0osX3AjAjTdstXqZjAd48vyM1 tLnU/KiZIrF2qXzv1QtSUojEyP2jj7sXmTuScwUQwpbSB4+u+6qCh1esoC7E2BhKwTQruHsw RyjkqwN1ieMzuu2s/XjdsiAdhzPIg5o+qX5jdLSlYqUUz00/L1XWw2JlACN6hfyYGfQKtGD8 egsRGi1Tx+fkKroJFkcDZ4aHrdVHELrYsQ1yQezBq9K7z7yXjvdmRbZazOjJNy+wWRHbWd3L wFv4Hm1Tw6fQ/Q4vNbah6AKtrzC8xN0ph7PaNgbAfLv/At3LBY5t9K2qHcyE6Gz7nb4ad7Ob FX3Meg4n0g3yBoF668KsWiM3WMmaG15qtW0AnB7ueB6ZojY8vMFtBxqew7qB3Gbanxwva7s/ 4Ywh+B5S2S+A2+T9Xt6LL5tt5b6W2jMTr0B/664GevfgZT4Ka07Q7+nR/4RYraFNxcYobm9u aSi6xE8w65EKTwZdQ4bQT3OPKL3R9oJQ5XcOSBPiNyamoOeKOvhAshh39ga75i0qcEyN8sBT 8oAUehryolr/JHX5InbS3ntAqEC2+JUyNu+JNAvQEYoGANMT/Lyd/l7dC77//lQ3SU78RTfr 6Nt61kSHLgTvDyB0a3TxA6zn1w1D6EZ0oQOs59HNnx27GiGt6OsdjdCF8ivDHnDjypjoUDu4 mnk8uz+g6gpPtPD1lo4wW50OK02Zflbc1bWgV3bQQ7HLnkAD8uQ38ru7u8luTRvHA2x8Qizf abGqQkAsr5Zt+PFmxQxW22pAdgQAg+1PFEwwaT0fDLiRXYLvT0MLtzs3voOlBpVUGEIwhGAI nSYqxTtcitu4/JKemt18uahPdFAOrqaaDlYmsuxEmwVTf3CZzPbfxeREP5YOEB8aNTqYy2RH OEWjge3PPz6GRGvmvP0KXQfL07ZtKAQ0knjcDv3EjmmGr/NOIBNiHCHgnjKeUfJhs2AwkB9A KFLynVmTFBVHGEIwhGAInSZ8l7xCKXcawaeeOHjz5fJ2s6LOLnr/f5KHprKmoxulZsOMCdJe WbdT8luPNghgsljjWDBYNRcxNxdHMHn7GqSZyOBpkdBFjm0M0Lf3x19klhnnDF/zwWbFqGIY QjCEYAidLiaa9BnL5b1jG8farUs6uOgsLh6/KlMXOzt2LsEQujLBELqAvlgIfV59EkK4Lvfg g6u24fX6qzL1RUEogQFun3ROg9DY1dlquxSEJNngFop6KoRSLmfACIbQRfRJCCHTWw5nq1Gt FNOrMvUFQSjTnXAbC8t8mTeEHnhenS2D3KCLQ0hPBHcra3tlJE8IObpzLvd+jCsMoQvo08Mx hulhl8C0aiBflakvCEL3JdbuWjXcNg0UvA7itTum+c36wJUZE3kWdmEILYgu+d0+9zVYZb1w 3OAFIadss8sVUGmTizkMoSuC0LXoy4EQRrfQeqFd7rapJejfW7yGOZI/ScxeUa7j47V+vQ8u CCFmrYTb3tStc5/cVLCEdw365I8ycvg5Oj7+EgZmX3x1JTum/4IQirshU6OnQSjt0iZIU1cC ITx9mqYXNnLbFOSQSuF1BHh8ZDLxqnLt36G3elEIYfSfukUm3jr3jST6B2SmYU/+KIanjLPd pQw4i8texcDhrwchGcoNmaoQ5w2hndJLm8DIRl4FhADasjFQrfW2idK6Pcgr10xjScpV2QqU JApdFEKA7SF5C93XqkahdPJab0AO9rReyoEUNZErmUH9q0GoYVa1ksxkX7+Y5KTcQB7Tqsiw Rywy+XI2hDN03eJMrgBCAIm7lTrl7CmSeoW2eG774g2h2+q+Uz4KCoGvuYBgCH1SGhNDYbGr 5dev1Vg3m0ZeZ8AXf5OTbLycDZEVd8dY9lVACBZvnQIhWDCEziESffIPRADi+hWA+EO1k9fJ joihJhfxS9rwfj2SRoUhBEMIhtAXJfXGqVrZm1BtS54Pr4ygYkenLm1jdvfdER8MIRhCMIRg fVbBELouwRC6TsEQ+hMJhtB1CYbQdeo8EMIKMU9PxOHcjg8zId+OfNykYAhdl2AIXafODqGs qiWpqTWWEFQiHKOPZlxxfOoYgB+kVyQFTwiqn2vlTrieRQYmRMm1tbUVivHHm6uUzUj7/+N9 2izO9mKkSVel/Kyt+e080HN9giF0XYIhdJ06K4SQpnLeEgFNjxBrOMDf7PcRKqy6q5lAY8ml ECEekjuhfp4spCSKR4F69ztPHocXPnEllHx4X0l04OCiLVQKe8YqI/rEG+E0nAL+WoIhdF2C IXSdOiuESO2I4jxCj6e0TAbYcO75MMbAVO95koHgkJatmZnnZBPrPFnIcnuUA7aXR8q3t+mz Ev4JH943XD6EiaXjNONsjVE1oEaflZmdhwd/KcEQui7BELpOnRVCRg6/iED/4ZOG1U3DflU0 BsC0MT8/rhf6X5NAicuze03TxAR+X8lNG+cAQYha7zm/0YkEVNOeQagQLeuFBzo15yYIeKPt pQlb7tlb8nZZ/qoPACi9XFOQV7fBfVRD8fUURJuNsYpqISSEPv2xFbq9kwagZq2WxSWLq5BR /Nv5822AqV9ZKcJlE7ZgfmajDYqedJLHKgr4DnaINryKgP5dfTRfAkMIFgyhPwuEhPeWlbrS tXHmKSX8Xv/tYit8d8p6JFFVTgjX6CiTek/B6ZvsmhL6o3tmWT7UPuMMgCEupuq53e8hMZr9 eyDQvNDNYE077jiNNcTKOHY4LJhT+8oVZfT8JYWQDVwIVcdUcqOrrK2QGWHWooN1qkONNhDe VlQNsn4jKgQs5CIj7dzvBKPzgpx2VFs53Yt2YYnzHKoRQVGmI0aLgFWXdbWb3KxE72e2BNUH YbN9mSIMQwgWDKHbDyHrM42dqGYjv+1M17Sh8YCsmz2HHpi320hHJbnWmAS+ubOXZjDrGpyF 1wl7kq04YcYpwQNUWGqNgYBDKpE841INgIVd4qCvy+vMAkK5qz/RXBcRoU4Z0tVRHqWNYTlc CBXUjfLhcBjbOlGieaQ1K6vHIcAA9DvYabapfLfJB8qWp0yrvP8th5YsCgkWsGz1emqBaulI 7iMYFieY5u+MaozazVmwZERzjjOMXbFxaoOHY7BgCN1+CC0EtZ0pYYlxkrOqk7hiAgCyqSxg VL+NBriKVDmhtd9kCACrdr9GGDD7RxPdnGISY42A4M5TH4AZfiibM+GSB4CB9YiVb0CAPsbi vmgNAMpqXfqh2RQc1tjbn4TmQsh3WaxjxE4vN3eNLbRGgMZlzk/SwIrYBB6Mi29a5Si6WwJt hfAFn9Ymmh+OGOm0gsFrRnYYCEgjAkkMwTaUXci6KSitPt6jzKYjYuh/tVV6GEIwhL5ICGWK beXzUFXGcVLSOOWF+x+hKKyseAEWlJjFVs2MqFbweUokmwBSjeI8FwCYu7HBHdIxvqTAOog1 oDv1uWalOBQJ5dglWu1arw+CflEV8/23VYk2Fc8s1RbKZHCsIQj12IQ4bW6mOo/xAbz5buvK hni2DhiNEYBSPhWNottNqUPo8nohpNYhKwy6f6nba5l96RTTnxWMcNKNtUQbUWjeQfmaKceh j7KMi+RfrjD71lP74SoNQ+hLU2nQP/7jnzyEqD9Ix2iDRjrUkr521cq+pQABZAldL3uzQ9R9 pm8DUcUAzJrQfBOcuR8J4BnMiF9mNSguc9BTrLBF+nzANgCmI4lWgqEt6sAYscDdzUgVXk39 PnvSyemX6ZwUOwhCdJd4FBrto10CgPrU0OPJp3U7fkBhCHoUFItGCQS1QE95uO1x1BQ3hAG9 8FlMQEDAskwptqHGWSw8d4Vh1KNSF/5oKx15+F27OxWYC7qkRGjQ6stUV1iAB1ylYQh9adIp 3lGJ4yEBvoN0KYrr+8vjFNdazkxAAjCm0cp6OuM7lvjyEd37EJpjD6x3lHLTdGXHq0sWTUBX VZOvzMrEBQHo1YMgZKigDkVChqXcw5s1S5GIiC6WmdzMQIP/wcT04QZIRnWuXXVP7172OKh4 xF2RK3ZEdY3sDQAkcROCUKgnGWx7e9V0sfQnpExTunpLNT3DE9OIbTkEeuQjkaM1/Ppi4wt6 hGQb8+CPL1Nff+NoAFdpGEJfHIQWgtLOkm6w40GSQFo/naaqyax9UqHe/NqtHnBe2KyrV+Y2 kgAz316pTX3vO7uq+n5fpcfNwoRlmU4fU8NCisbak3j1qPY/wgboI1ODYCBJYi8lY1Z8wTfY Zo3EsIxWIGs4iN0F3Tuy6EMIeX6lAvDjtBACaHyyVSqkv4PQGFDJjhPyU/p2XSjObowN/KIn 59lYwkKtFeHejBVQLnTzDVYyQ1IXf20+2s2YpivAuJhH0vd+kLb/MuVqqIaGqzQMoS8OQrrW +mdJh+u2LxopNrReVmKD5rqR6u4ge6nY/CDvzIZm+20GYOTZuU+YjEc+co9eHJkcGQecJMfM lVGHxQZg7KKan097WJzhm1mmDnCWMgGVa14BAiAhpiPZU8s9AuMTGhAFBDc32AeW8AkIh/Lu KZuhLnC32HF4JfOhAxp0uyRGzCIezvrERq+wQYmgo2P+mvVkhIlO5mbwanzMrLmnW1DcmoyX 5VF+jf0jmBfzSNsrf364XsCCIXSDEDrj2TGmx/yeQ+qiWjoAAxTdCNOcGZp1+65kvhVhxhQJ kEZVW/HmGFRy9AgtKDmLAfBCsfdoi7EaeOATGOo83NwSZ2JA0TSBAh1W/OLzl3nagNnTbk1T SuhDYgPjM4DyqPHReTQ+tS27vdWI0RyAGagZsZvaW2IDtsCe833Zl3nk/kACibv2tRAatqgm RC3xq410yIzNwPZJKnrZLY2Tjr9LXpN6UQgFjcP1AhYModsHIQB8lOki9fvhhYmyDgOkd8d6 kMhZTHT6/r5kk/5+PgC0x323CUL7yclmjT1G+3c6q4h86lZY8iAfd64YF5Ug0Lv/iKnIahp3 OUvDtAQYZRkdG0JbVvlyTFK4pvh2RQzMs/4/+2b+1VS6Luj1BkiYw0w6gAkIGZinADJPQhhk CBAouN7DCoK0CyIiShgDiAIqgyC3ywsyg0whYUZoZhQuJSAHoaiz6vzQt3r17T73n+idAOpJ ytWcKmMfPd/zA+7sb9g7385+fN9vfxtrxp4NcijREzJsxi2lcuFUqz4Qy1ro1fUPSx/FO7u2 qOt9OFkbEf43jkgZOdjt7+TiIJCEkIT+EUESQiiAJKRMkITkQRJCKIAkpEyQhORBEkIogCSk TJCE5EESQiiAJKRMkITkQRJCKIAkpEyQhORBEkIogCSkTJCE5EESQiiAJKRMkITkKduaQium EX8NkpAyQRKSB0VCCAWQhJQJkpA8A+shDmgUEH8FkpAyQRKSJ1nj8QEaBcRfgSSkTJCE5Om+ 9p06GgXEX4EkpEyQhOTRvfjHZ2gUEH8FkpAyQRKSB0VCCAWQhJQJkpA8SEIIBZCElMm5JcRk 0OhSaGz5EiKbKf2HzhMQ2H/j0WVN2bKOGb9aTFTY+n9C53lyfs+IIAkhFEASUibnlRDbLKil v6WlP7yuWv4Wx93xxv5yw9cj7O4w/rajU6xygOYejnWcP0JRLB6/RD3dynG1PO/PpXfdaaXi d4wIkhBC8VeFJKREziuhxo0rWZmZmaSsNStPuSKz9E1guBfYJ8aW+id4/S0HZ6imqoPgKI0U 6JQ6eOwmH+zQ2nJdT7YIb8x9ztdlk9He5ehBfcffPiJIQggFkISUyXklxAs0OJo2ne4zyo73 kMqCdmYMBqgYNAPX/voLd8c3g3c3pPuYNMXkiSnbRTv9RJSFTLzVJ7uAm9ecXtpYyPohvUSa 1jHOqrAZgpmOEdkh2LjtsM73nTDPajAYp4dhn+0BxvZFp5ihoidGNCQhBJLQtyUhQeFlK6pQ KKTgeEzhOBs/6y27zeldjrw7d5tBr8eQwgAbd+0tbGejS5OeNFwi4iyln4QEIo1G8SlpBGLJ bJesN16Vo6QRwPPlT60gjEylCIVU8bzmVQEwJD5N5bKZJYGPY9VSklQHXJGPl51WJzA4Ep9x GtC8Z08ytwpbkeww9PHq0zYAlrnRZQT2kM4cFUkIgST0jUkoPfj9fR1E2l62q1xKAaieiStY Nbz9GiQdHe4eWFFyHoDrZKUR+egSB6o2ujEHJS+n2Dx4uj5VUOUyvWUymeELcGlhcvl4yYvN Wb21CxT+lqzX9UdLlqKXO0YmuUZNADGTawVHkfcOgdNyXGScG1Cagu82Cpxa5fkYb+kXNXuD 5/BTY6PKBTHHQ9XO2CR34yRd83SQJnBNPSQhkhACSehrkZB/3nnqeTpNzByoqanWiQDW/sd1 snFw7Sow+u5HLK/d+iUfeC8CNJYfjIrYQOTmPnFqjkvKNINhfj0WmywnqfnN/fjYPuOO6aus adKtAmH14l5B+3HUAoXYikmoQiu1pMsvxyqJn0fY1c7dbQ3+cZc4fiOgqC/6f9XmsWfDIgsW 0v5nqYto8HaP/bTYKHJntz7kJdc7PXopez+6ldtpvbdcUxj20QJDb7uAp3QkIQSS0NciofNF QoS4Xy5er619+wcTAPKfF3K4nffsAB99WWTpZ/xzMQCuWefWrVp/VSahLjpQj4W/GjBDdNU6 wiTUN6Hm53RtgTKWbVhZxhrYXq5bur9VMl5lrjlMrMEkNFZqsNC3bLf33TGHWLNTTZGov33q oVs6OWZ5EN0z6jyTtsS11OVriFJCr7+mlBeEmTdJVHY0RgZ0/AeoLvmbYytaZN9x8fMPKuWa 3G3w+e0jgiSEQBL6oojsYl/76eV8Ci/q6UN3XuCropX29pUad4D6nlmAiolj8JlPJwJY1c5I b321/I3FjsirXa32CVK5XV+vuKRxDMB6qmVVbh6BmY6sEYPV7nJxb/ihh0ze+fn/tDfuXtsF 7uUfA+MCredaqwH0HGKKjQ3/nDDW578JMFbAt/KzS8f00pW7Z9aUaW0LvKnvSiuP1if+fboq +G7izmYnlW41aKAxqe7LPftGnKt7WZ2M3z4iSEIIJKEvStPcz6U75g2foDJww+vkfhak2+ec tWnQHgeompiE+NhKGoBvQCvNRwWHFZQXX7RW6dvfxHIhn3dZ1aMWdljD5jSrKjuyCjQGx9rK mpvFGbxLjDIMi8jj1WASwoWlBY1sjpRhJfROo8X1rZB/aR83zrXCoq+aNCsX8nEnFk5l7JXN Nug7gjDxp9joxEH7wQd037XLE1EZox4ed+Z0kgaNUs4eyFkmavsyf8eIIAkhkIS+KAOFf7pm oXH5E5ROrA9xTiV0o/q9hDpKTiTkY2HdCOBgkEDoDW2VllCis/KaSdmYD+JrM7vy5rcwJzzn W1Xt1LsDfb1UFROa0CeGrLHg6DirGjNGk84JCbX32cyTRdfjhW+N3ARWmjO46cJnWBBlxLfq mgwcBqCaa8zO5q6lgNA/slXsOJCs7tIo4QpvrgVE6zlTWI4thX8wIZxJKOuI+HtGBEkIgST0 RTGrD3sZ/0nEviLLk6hCUBhle9amMrIck1DSFvBCtX2AXnNrhZ2nadGElZQlZXlbhVZygJ5/ 0Zgj1iFhu4J7RquOK12BWRy7RgHJ84ybzfcysA5f+s8SW5/UgJCfe9ov0zb2sheNqPt2ibZZ +gITZHDPHU5r2muA0b1S29k4O1twfq5h5AyUlUUrx0Vd8JD496Q82Bn2IKhq7p+tuOYcqvyu EUESQiAJfVFs1wrF56nHC/x5sLK+viGu4BJhvxbLzLwezgG8TIpa29b8yy6wijqics33Y7VX GnHHfDuT+lCSCoyH3N02Ib3VdHWJI40C5BQkLWaQel5Ul0X12BXEJQ2KiKa/bADVIOv0GESK 9fWC5qXBP04Sqpzm9U38b19PhgHDK/rGif89zLEzvbIMGCJz/vHCflhgird/x9Hy0+Ct8eHo icq+HY1W1tmZPl32+z2hEJIQAknoy0rIzn70PPXovdGRSZGRSe8Gbwqyc7Gog7q+i4VDy1oT Vy7HWgF4b4RM3KstbZUAuG2FzvPXhxhAex2lEV1IsvOSFM9I46TZ9SvR0ZW2wHiWOsHXIY02 MtVTHwC3cun9UcL3NILNK9NXWOzDuCsaVwzJImjUzYzViB5coLq8XKnCqoymR1ukZWLZ3aXA e5F7RfEMmq6GzmX7hffJouBo3QVJCIEk9DVJ6FyP6Ime1HI9jCo/Z6ZgjA3AwDljCZRNjnuZ hOKBlTv76ZXFlwiw258+pqfSWSGdz/bMKcuh4rk0hrONdN0OA+/X5YfDCjwookuzFdguXgUP 2GM274/CqxrIEeLxzmzg4KvKqilcrA5B6DXgLWSxaTbO0kXaHGFXk5kQ26JVxKvZcrHeCOXu YgmLfdYHs4LC+T0jgiSEQBL6u5TQ3yUMZXSKJIRQAElImXzVElIKSEIIBZCElAmSkDxIQggF kISUCZKQPEhCCAWQhJQJkpA8SEIIBZCElAmSkDxIQggFkISUCZKQPEhCCAWQhJQJkpA8SEII BZCElAmSkDxIQggFkISUCZKQPEhCCAWQhJQJkpA8SEIIBZCElAmSkDxIQggFkISUCZKQPEhC CAWQhJQJkpA8SEIIBZCElAmSkDxIQggFkISUCZKQPEhCCAWQhJTJ+SVEtKGMU3GNnyxnE4Eh wFXg8ThP4qersHk8GpHuPIbHsGEr1GDw6KeNOTz2eb8Dr2KcYsP8XCOCJIRQAElImZxfQl5r lye0psKF2E3P9VDUDM6LA9Vr9hH29lMbPr9uBHyTALpmlkSNQ/qpEf43/MmdClV8ZvI8TrYc nnad8ytUrIb2lNpVf64RQRJCKIAkpEzOKyGGylZaamaWFr+5ERx2vRQk5NI/0gh1j3Ssg1Oj k0KTfy2KoY8YSyC+tPSOc/j8u6isrNBX1nkEuTp5l1/anGytTgyc7xuMrybtpadqT5YxPs+I IAkhFEASUibnlRCh/qE+CzyCDCLGCHav3lgCMC0lkjEagIegkTVG3Yh60QUt15a6XHwuFf47 yRtrwhB2cWVi8BBKqFgaV53Zc0AXR2rfsekNNvH1ruq0e+Q/juVd+C6Ks7QakUUdC+ow5QLQ hFSekYEYaCxPFo4D4EmVsKQ12NghZXkXc+y0DYaDf8glGHuuM+mJJIRAEvqGJSQo7NHFjONs YsT1ivhPJzNgpIRPTyeIAcr6D/PDDwKv+6tCy3V1IBLpKlOR2ZhJymZevCnDFMJwWOqbTuYw gu59d1xRxtdKZvWSEgSYScou388B1nCx0VJLCXaInPyl8J13S5jfOjdmrBY1y6AkO7y3vRy4 D5b6dMcwS4nCny5ftaUB3af3+UZ/iSwcIw5Pt2DectUoZCEJIZCEvmEJNS68Slw1YwOui0PZ /6nSxWN0LrBmw39OhROUZuFvFB43sagC/Y9jpHVp3QbmwG6Zs1vKXXRgOx8ebc3UG+5aWvEf PReUaadhElrsl9bzsejIYa0ET7YXRb3wpjtuRRs9v/tfF2gC3cK5l5XfBYigU7tWoyhHZGT9 4un6sQroFc3tGlmQvMBsZ3vXbs/4JCkUVlkywWM5Up+HJIRAEvoaJTQZ7H6eekxx5ePIzOXu eOxWL9DJFvC6C2dwkqOkJcve767b3fHt8+/Dw4XaB7K6owa5BPeIKTd8f2iDV07mxFKJe5z+ mJ6TthWI+WnJNvmhgboHqpuL77YqKhZIarxLiXuH3GUdsvjO/D8bM5pKtXSbNn7QFEHyDz+S Y8an+dM+4wmaRja691K9y7cXq9k1T0yondtGtu/nvykJAcFDaE4IgST0VUpoZ7DOg/BpOO+n oP1ezyX9fC22hQ4LWm00YnmbG566HNKHy757JKIJskmrNhB+KqFkzeOShom+Kor4SLPFK+tV RgpVPEvHb80PQGdHWrLgQtIP77S0e54EX6LT4kd88J37hqpdiYZ+DNqmjilXvdaEwybsBJTB wbU1S7rkxivXceowP1MlYSLUlWpmRqf3/TgXT9WTEM7OjdFeu2fF/kwjgiSEQBL6oqTU39vv bc/+BCurBx9mWlg+o0HL/CujHqZpB3RobM91in10b5pbHBneCPQ3ma3O7yU0qmmXM/jfAvb2 5n/6ywyvLsKAH9wXz7bcKZ2VScj5akioSbORqW4TAcDLJC448paGVcm8E9Z0eH5JEt6TgG01 B8RDW+1VgKqwf+Jf2eP/MnEzpaj2Xen6AZHoYPgwYHB5gHN6YuymTH4b4XONCJIQAknoi2I7 90OP9VTqJ/CPNsk5yXmoLbKsjW6UtjG2lKbGprbYF27PhYVtjNVotdGB155ZI8AkJJsTasx+ +MIr5KdBp8y4hrlkECTrW1tMrHXhdubNZBJi9Vo3lwhwAmldsxfRDWT/DsM75fO52MfktKXy fO3XMgkNYBLqBxCl/SV1LnNx/4UYvDcyLQJS83gehxn+81r7o6fBT2PQlLHgs40IkhACSeiL YrZ+N3jJtO9TFOSXn9zptpEh5XQAXvNgMdd0Igbu9GglA7we7Kuo4T9rBF5C4aoArt5VByJT oJaoXVeVVRrEBJqLqp7lJVsONGkZOFB3wrB0bEIrmfWGlHD6PJ2ZcWt9HMbX7GNKEu3HANTv TwuDJpbZQCsyGIAHd8MB9KLv+wBYxqiwulLGADdpcOztN8yC2bhrx6frGhvbMsJtkIQQSEJf J7Zb0d14fMWnEHJPJ4W4gU/ikqtEdRphDgzTV60eD65HzALBrnZNWNwR1AiE9lR9L2h59LS8 OkU3+uJzgfPrsEoc2JrvD7jsZ7qCIMJglLoWqQ7SdUKsN9bFpxJiNNxasITZxPvdeP0JUxxB /8lzWtOe/SzHd/5xEyYhLB3jTL5a4cFh7IakP/MNwBuNNbPskGTgbvSQTyVE63yZz0USQiAJ faUSmpxyO089YlnG5SvR82mlT8egzqK0OGYy9krgVm5sYFW+RR0HGEOZ97a6kq/3TNnfCIla 8AbmuImWdUPU/KoE1x8SaZ2bujBOSHiYOJsSe/kOlo4Vny41ZNZllUbEkTPnl3mi4wn7dS3N YoZnfmqU9dS1yGpQva+L1RHX70Vk7e11W4pJYeZHTjvu+LYrhiRr676z52F0q8XJcSQhBJLQ Vyqhc787VpEdaFFa2IIHoOTvPxU5FpRqxLU9WBkXJ4iwjI2nm7WT01UwlZoaTD6QrdipNp2K sm6XRjw3B9OiakoAmracVCpWZnwIKr2XToMY8FCzToteGO3VZYPPsUXE1lI8Bzxvpu5VTjbj wXGjTFqnadsibf8AS7hcdyIMj0eZ4GlVH7ZXVHV2ZjQ3owQckhACSehblxA0snA4S+kTKSLH RsBgeuLwLDrNg83wkAUkHJYNg8ljcblcZ5qsOpPAxVk2yoq4eJxUOmwBi8Ns9GAQaY3090/+ aSw8TsBoxMqJAtyYM1YqbYCz8fRgAoMg65opwOFtpJ0yBGM4We80G6zR+y6IdE8CE0kIgST0 zUvoHwQkIYQCSELKBElIHiQhhAJIQsoESUgeJCGEAkhCygRJSB4kIYQCSELKBElIHiQhhAJI QsoESUgeJCGEAkhCygRJSB4kIYQCSELKBElIHiQhhAJIQsoESUgeJCGEAkhCygRJSB4kIYQC SELKBElIHiQhhAJIQsoESUgeJCGEAkhCygRJSB4kIYQCSELKBElIHiQhhAJIQsoESUgeJCGE AkhCyuRrl5AH43P3iCSEUABJSJmcV0JEZz9vFy8vl2o9LluuqJEiACYuR1paNcb+9dYCDyDi hHSg48qxai45eAV3MC0taSdbdIrzOU+eQXEPOhA5f94RQRJCKIAkpEzOKyF6e6zOfR2d+wFR +Sy5otmsm+BJrsVKX2mv2f5qa27vJaBPznmBY0bYPZ3795PMB+QtJNiY1mPKtryse8937sx4 kkGkVkj75w2GkIQQCiAJKZPzSojndNGffHy8Zb7swJMrcvtpGfDvvt86Pq4MeWte/muxUJl9 L9DT7opheDDAHuslVjMuRa6Kh3+U2UlT0ZPJc547qXawry829ZLgc44IkhBCASQhZXJeCQkK b3idbVd4S0SXxHhp3MIqc0u58LAVhPxKaclsYkCrDYCzyF2sJ02uhGKVoRwGjL94GFfiOTgx C3lxRS7Y/pTUixew+ChlSKUML21X3inOi84SEcHZzM12pHYZOBSfeLEQO5TYrVNag1MlvuTr h3VZYebu6nMqndEoYz2AC4km5UhCCCShr1hC/nnnugrphk1n21enXmzN7zV3YQ7qt0/Mjb79 GoTaMgnRn81H6YHls7jo4KIyIrFr138w5GiWrRL2r7VXhVORszCcq1+F1eO9+Cmb6BkeGBFx I8GDSCy3S0xPvUuqBo9nwVfibvywClXPQy2i1Iic3RtRhrsUIA7spF7e03dh2uymh5amt53M Hkkc/LC/+VEmekhCCCShr1dCa1m+56nn6ZQ03X3zpm54PID+/768kj818RrgTWjlheUnf8rH JLQuq6Znf9+RfvVG0bNeaztbm5eklbqFkHURdfJaYYqzPSahvFyTEqyaY3DtCKvfnzzSNuc/ 4uyyHaYfRPrLvB4EGc5d3bj+rwnga/AfEQU5ei9SjdSXQk2cKQWDK5uVE28kD/x32na1rU+s w8ZcRJyN0lL1RBJCIAl9tTTl9mzd/CTdF+5QTmaLeXPXbjgFOqWn5gPs/ImMB9WLZGDZa4mh yumH7PcSGs+aEHWGhjiAs2lYc5e95gFdMDJTDXVau0ALxSTklhlrt1tTU9hj7m2j3lwN0Fqq L7zwrkgCB7e1vC0XJ/LAr+H7GRj+l0d5VOLNW4sSoER3lLnF9lhBSU2yz/bbSR4EJUjOTp+Y MqeZwf2sI4IkhEAS+qKYkf7zD2naHZ9gQjPw9DEWb9Gg3mjZ6IW+KoD5qyGAKp0dsI0N9AAY fTzzXkKS4A7bmUeZV5MfmOrk+hlpBrf6luNonE1+M9CjMAn5Bv/44+Pr198dYd3yUkTlyfUW y7jld1imV3EjuGnWfsoSQPyqD1wDrIkgmP5DnMOdmBv88OH1R9absyW8sd2AyBlXLxzz7PTH F65vjX/eEUESQiAJfVFSGh5PrW6YfoK+At0x4slVIFmodUkkfl2YJRo6sJSqK3ISyiziMEV1 BjS/l1DOYEfK0nev0sK0Im+Z21BnYt9eHyyuYN/sWDqRkGtgcPFocrJbOQ2YjnYaUVHze6Zj Cz1VAKzCdDNxBIkH4NOzDG5hWwA2T7+/ZhEWdvd+X1X81uV7PSRXoqTVcOKVRvH7VQIj0U6+ n3lEkIQQSEJfVkKTod2W+IpP8X7doCDd/v30byW/C4uEJiYhRcsa+xgvk1C9rChmItR75lrE gumSqdOGjZ+K2vN9flIeBPFrTtKxvFxjv7Mj11tk9iU0GG6MFWiKsFDLOt3WLPoGHcDrPiYh jWNs19Pbwc2mS+TKC95d7roLhT1bYqpt3epaR8gzm9NOgszdP/eS6U9KyMZs2MHBIXkAy/54 PhSFYuGF5cPPNznF9HahAVB1TUf0qDYfFzC8zD71jZnlTRQaCMqwsxwdoqDfNpLQV4Ktnb/D ua5CVqlq1/j4uERIIObqYD7K6SHD+J6WLcEy++IqCCPtJePUnNFU7eyxbo3cMiZhyPiC8GlB BZN7fLsbugPsPD0SewbAYe74bDnj5qMoX/DsS9OnJATUVHBmJ674+NnrdPJY3bemwTXNHLvf Vq6Zsog2uwW2Zbvt4zB7Y3C3u9UV2AUdC+OnnSSbxjd+KQmZbZHiKnPn4lpzoMQoiPOhwNM1 B8C5n99Tw/psZ0F/3YwHfLFGx/HV7o8XgLJFL3Zs6Z9o84bcJoDO9eCG3Li5FyqegEAS+pYk xFs0MF/uWzZ6kWBLI3eUSyOhLWDo36tX657/7jWMzWsuP9044l80FjCrjjW340eCE2NwZB3T IavgnkN4Vst35/pHmsFw3OTZLWXFT1uxjQl+O1c+G6y9OrT9F74e4+m7/ZhnV/5LDahc3sLS QJUQi/b48I4pSklgUnvV67CGw+KO/SbfrNKWs+BgpNC06ktJSDXJ4mhy8ijs8YJNSuik8EOB yOIlgEO6xkwX8/NJaGOtBJ5dvvFGdWZ66KP9hKWOvWXvX2/jcaRpOsZ8/bA0Y21y8CHfCv26 kYS+Egmdb7Ei52ViYaaTE6lwzbUxIRe7A8fXawBcitP9G6wT1UCwNZ8ZmJnZUIzFBAzfo8K5 Qv9dKmeoIDU10LhOCD5xpfkVz4/GoWn19dnKwoqYhiinolb9bW+PvP2o/cWwAhbovc70bwi8 MgJ6azWYhJzz7OynrBvUOY2bhVNzTkWuYylrNxYD43qpZ8uy1fY3vpiEggKOXJuaymqSetSa NHKxjBQsx7t42Pet+2mOwHl9ZV06O8Urx51Wt6mQhiI2FMyXvBKcnGLwfpSTuTZPKu70u+DL PU42eBIJtmvIleDxwqAoRyAqq5DKZ9xPFv8IIu7nRj04qcjAUwhS97Cxo45J6yz+WIBnN981 SWlqGt3+easL/byRhL4lCbFtR252d9/sblGtojlewn77vGHpixeENpPeIasSoKm0dOv2q54I hli1afTyjnRZMy5/e0ka+dDiL7gKyoZoMCaq/vCOxZCR/iZ+3B2PZTpLRiMOOQzs7lQzbh+y yoFGcYrsJvVq3V6R/r/Pia/ZzvbBAg2/TePl5A9dVN0xE3zmEfmkhDY7smXyjPuhOSXxSMh2 0V3NfrmUzLIx+inE1TZDuzDcEqe+1Nz6pgyg3OHCwvMWt+T8l0tL/a4jpqYjHxmBOa7bnDDd nkIvserOTtiokX7BnAsvZ1YOMZXggvpWXyaIG4cc8GL/W1sq5bazeLB5ML36sti1EWi2WnHq PfpYLohzU+9dWe27g8WLK5tXm192dwEt7q0RjrHLH5EexG9K4yYb/b6RhL4hCQGRzZDBZgJR lnUwZZZgc2hE6RZTWvz+R8/g0E8yE1ojXVaNyGATidiW7M/7LjmNjJN+iHQO+6TgrL+zevTG k9XRxLMNRiPno6SHyGR+7hHpvvbng18teDYxTSXwBHk37qunRB+xPI3mA40mO/hD3IzbWi3J DfeiTW1bAtImFx87edNUox72RG1Nlgb4L+rcStfPjb2/8qGjipXYqb7ASCPuwZ5m6naEwQaL 7fl8YtF4KvEmR9DP1yHXv5vzzphybdv73qmuzuRYpfFBWM/RUVJUDlCXLLqrS+0x/5vlGsxv 1Wv6e7Nnbl/PnEx9V0NjV8okFLkpPQh+4X7R554uQxJC/H+V0D8Murc+IaG2d/4z7dmm0U8q KbYWRzasrfqUkpyFWyP0w9pKCX5mMGPgoNDwQrU4Q9sYp3b/7krnpZ2fo+Ob4n4IHE1585b8 oaPOiNAWP0f95rGgxwFB1VYNhupjb0Iqy8oPK7PcfFKvvHEUmZPyMjWGhJOvEoS+ZCeVKtJe gki0Fu0KKrHp1Zb6Fgk0GEj9YUeU8jR0gfryT1qb1XcGSQOCoxMJdcskNH031wNdTSQhJKGv kM1H/6STfsp+y0dPumMCJtKdSP6hW77QpHGEp6moxde9Cb7YBl49y5i75rI9i/nt2H2fE7JX PpoYKATW87BmgNX7NZ7gl7T+0ZgvRvo3jw57Ebpjc7EE7KAno5z0Y3Brcd/eLytu7xaw+MVr 1CfwihnUhKmB93bcrLhnDUuAy1X1QP3nVDWrF5rpLIjfDzkEKCGV2ta8WrIBmmnk8vjkxxLq u7WIJIQkhCT0NXKY9m//8cdTLm5/9CCq7V3ERmtN8SgLy4UuH1E4jjW5TlNvf1SDlHsFAOGZ u7gFrVEsOxRMheXcCTQVguR5YBBAn9YDDozzcz901OjqdO1uYp/IuT+wFZOQu2Z9TsT3Hdpa 83wdNQfNq7I6nLmQWXip3QbVmISGAmpOWjpP396bNCfdnhCz48k7YgBc4L34mcsOTOBlPybp FX0kIZz+2yOUjiEJIQl9jYjjLN40nZJC/Wg50LMJoxJLlo10j9nlrQov6wnjNu/lhyNge29B KqEa/LKWGhuAMlhahUmIAn7PFzEJLWtjEpJ8LCGmp8S9Zv1xYEpLYDMXIE/zyMt/wvRZ3cjm 5pjV49dYDRYXv4hJaEn7wYmEXs1IDVQhaBuMzCxa24k0WMalkMmdAMLMnoGZ+UM28Ip1yF1r H80JVfvfT6Chq4kkhCT0FWJm5+TzqwWbEzVnqwTNSo+7kt8NSojQ+nYEmgKeSiW0itu00BcC WHXYdx069VExCTndBDDiqzeC38cSclxNprNzQpLUrsYucoGTfX9aslaazQbuzYzZIf6RBODC znDglVnY4MskNGAWtl8OMEJ229Kp8Z2dnV1J0yor2S89APA1NKyuubuGB45d6QX81iPZ0zHp lJbz05+cqpjf/MVCEkIS+hYpIwe7/WrBzZ6nZyuiZ7Xq/XxLQ1QPdaO/7yU6GmgfCtv9lyv0 CsIyNvNJ9i2sTX8TCZQU+YcDLCTd9IASTdKHjmatSzPaDqasffsjDTY2m1PNVXiXsgzDRzai UlWoBbFHm5sWGg7re/FgmhQEIvP0S8Lp2IbNzRtJV0MmSqQd4Mh/KrZ1epK5ubkerMtd/XPP cnfCla0qQu5P+hXsmZ+z8nt7jWNjD9C1RBJCEvq2JJScfvVsobbLfp+zJfn6fERgdGkvUzL1 Cyn+2VYxjtiUlaQdqbFJI7aRW4VAbSa3AbwhHTYCNXTtQ0e0OyFPOkoH+y3VY2sntJL8fdnA 7p3X0roXWschOuYGRGrHrgibc1Ogn5RM9F62cyOWk19Fake/iFmsPHkXI2ai7zD33as0vvYu jdj3hK/Bn88cJrL7YlfHmC33btfevXsvzp2DriWSEJLQtyUhriPl7NVRQnU5m+jd1u0gji+T EDmiGBVuhZcfHWgpoyPdl7B4qcLFjwOcLhc8ANVxjAkcs49ftSDEh7+Oiedy+qfMbx5sxktt gVOx2twUY4phu7S1xIhxTEm1JwgduUDQ87IE8I5pqRNLcI5eJxmWjdh72Dy99XDTCkv/TJJm Rq0cUggAJbNddBCqxNTV1VlVM77li4QkhCT0Dymh3wlL7OAqwz0H+yRd1+mRnbX6mx9gDeWa n76FZ9cxiq6akkESUiZIQvIoS0LVJpkNGJWV9Zun89uNupXFY7+1u4Gi7fiTreeJw+j9DCWD JKRMkITkUZaEvBb2tzDI5ONnpxKi+V5w+M1vvpU/C9I72Xow00VEl025IAkpEyQheZQlIeem oXgMsTi+6/TROdGGwv3NMzceFcLTBdEVXXR01ZQMkpAyQRKSR1kSQnzFIAkpEyQheZCEEAog CSkTJCF5kIQQCiAJKZNzS4jJ4fF4nr/lvWzi/2XfvL/aSvIFf74kkUU0DBkaJaLASMKAyEFk ENHweKMjGszwAGMcEBmLjA2iDfRpBiywAZNFjh6CwQYeQzBDaLpf956zb2bfvrOzu7Nv9x/Y K7BxoLFpt9XG8+rzA7q6t27VvVW6H+pbt4pNwhNxXBwby4GHO8sYarF0K/WT1QiSEOIESEKS 5KwSYtWt+GUlrPv1Dp+wCFFEe+dKSVLmIC68MytrPcsvoaX//RNj6C4TNfvrpZ9qwi+SEOIE SEKS5KwSoqsrRgUEBJRVG7S9fYg5oVr8rlOp5mvF0/HCsj//KUpYlkh7X0mUfgVhTdjImMMn eueDJIQ4AZKQJDmrhBiezy03cyPuZdxtkHvr0ED3jXdOuTNV9qc6pEQ0XP79au5mzHvVMql7 x6DHYU25hvlpagRJCHECJCFJclYJ8Tj+juJPVcWZ2Lab/fK9plAoU15+Mw1IKxqGsjxok8W+ 2bGwnkxpSHl5Zh4FRJl95TKTOKAauopn9FL8lcXrDLg9+thf6iA/Om3Avrm82Q77hp+s6gsZ fNFHckmcSwOwcxXWfZoaQRJCnPz5IwlJEIvRuEtnagVzTbFCyEYPg0pzvx1RdK8r7CoJUPbJ KZR6/MfvN5yGO8pGlPMPSvEUO71nGcr5N4rYfr67GTO61hReaJxYQoLujALso02TwwAYjNx8 9Hhsy1e5coNAITpvZyjle5YfTdwj8eh4IHoEcdI+TY0gCSFO/vyRhCSIxWKyy1nSMXQVqgqL Cs28bzWYqv+LV+MltafBYStV2ltP28rLvC4NVwRNPai6rzBvXHQ/dL+5yt0nRt7VM6J5OSjd RuQdJ9YLLzCglYIFZ57KmQLwUExJ277sH1JVE1hR5GIwG2HW5zrVejwWLTDL95HFfZoaQRJC nABJSJLoz/4QbPAOntodLY7kTn1plW4QZlUW5oi3fL5CAWNDfzuAWNeZTOcgdZDS9LbBYqjk eNlYH/dCgPDGydqAPTzQF6Ma2/xflxAlJUi7SDRvJW1scKsCwNk8fzLrq9l+fnj2bkf0sQis yp58IgchCSGQhH5dJsf+6//893egbH30+h23dF2o4LM11hALUCvMA+CrHGC7h7Sv5FoEW7KH lJawb8b3r0yER71oLXNfzCm4zodTjnGvSwjqtgNjzaymi5xGOSEAtNW79i1/CNoYrQkUjha9 uCiqTnUH71PVCJIQAknoV6XOQFnH/h1M0o7mBTGS8q/WxQ6kibCO0W3lIYC0sg1sd1FDZUWd FyYh5XTsm9Q9jelwFZ2jnDkzNCyuKg9wt3tTQqTp3ZDHKpksm8V0awDCRuWllK/jcvT2a5Yq XvaEHGbjej5ZjSAJIZCEflUsFs0LztQKHH+nl9u1QizgUstwxzorhTVRHvqGiSC1NYYpZ2hV RXVSaEDAorzc3jjlAcw4T6K01azekBD0BegFbeXBwGp3M8DwbWFrxJePwy0mU2oaX77pdy53 QDOmEecIJCFJYmFp1X+WdFTXrXDWi+2pZ3wAuVqfe7E2cxkGpfrxQZdi9xUa6mwaldMH8qZm 7tlYzComNPhs2NuVe2lmFm8FiiVE3XKTPpSQs96IYiIP7Gqq0wssnlitte34uMukuYRZPXhp nrY9s+JPViNIQogTIAlJkjPPE5qKq3spodWZPPFijO7d1VHfLWlWWvId2ypZTonBYn5+JlkQ YqgyuqoS6Dy8ocjR7i5LIXE1zQ97Qq4zjw4lRDFTVJElg2PNd263DfJtJ1nDWiVea5zqWmPK iwIclnQHP1mNIAkhTv78kYQkyFklRJKVIbxcNXbTDwu4gGuvo36jwl4AuEcVLaWE1jn1G429 OABCTMcFnYRwEjgvqF9oaC4C4oPyw7EgD1XToxyYu+LYzWbD23LzxmYBESiFCTmLHVkWx4Ux 5RMKP1mNIAkhToAkJEnOKiG84NUiVRz1qMvCm5xkHG6wadgOrv7ki3DK9JHjYQJWaav4fReF d5gKz3jx0n2ofqQB+6gb3e8vij3KANRa31ikwcKRP1mNIAkhToAkJEnOKqGPBp7fYegunqRd t7Edcx5r5KwSwuNMRSKRlNi/QOdS3j6Ma3MsZqHf198JSEKS5FeXEDkrQKFf3Cdyfmx56TzW yFklJAjRuTcxoRMRi6mmv+n1qZU4Kh4I5ZytRt55vD/EB4AkJEl+dQmxeiKq6OIN2qMek/NY I2eVEG3pobm7rauh1QqAurno1QFGfQQd7IPjp/ro6Pf1dwKSkCT51SV07jmrhIp9n7UktOfq XQ9NI85miAe/WDjx4jeKs1XwMH7665w8EvZNIBCnxWPR2mFshqeLP0goTvvMQBKSJEhCb3NW CRkrJQsEAvpQ6q122m2lYiCbFtj31EVTBM1KPvZMg98+5QFeru6ifRpmJqnBgYI6hkkhbaC/ gCowdukZpqCK/pxAEpIkSEJvc1YJmcSnH36GVVdE1/iKwGFbV/3Adc2CcO+axrhf8NdTzqRY gyC9Gs9pNvRGbvkYhLe4ToXpmq91dRkYpkuzUU1/RiAJSRIkobcpWOWcaSFLcb7XI3196YQr SuGCJd9oaHk42lw/G1XB83i2myBj/l2OU552QFxuhYLyHvfB779LnRuo+Uv1qs72c5/pieBb G0Wopj8jkIQkCZLQ24Tf9g4hcIksMpmMf1c6KcMvV9dGt2euPcaD7YwUmGlNDtn5BVgS8zy7 iylPNHrxPRn7aiyWRyintOmrjUIyZfWLVTVyz90aLrE32NAO1fRnBJKQJEESeptB3VtJKU3S k4/CB22i35FOyvCLdL309MQqYwBbXzlo61tX1/X5bQ7LhGNFgAhFF4i50oilc56KymzSkAfA GyiFsEBfYx6gzT3fBtX0ZwSSkCRBEnobppZbRnaclRj/1NRuDPM1rXktra6KZrO9PZmqAsFR umIfhV77TAcn8bZtfjHPLylsdCNMMYfcNpYqBY0a9mBWnYAdS6upDPF41g9ArPFqpYCL4hxW RrqhM6rpzwgkIUmCJPQ2rMmn4xNrHP+4OM/Ism//iHGtTFlJWVkYmm2blGTuqpN39GbL2Hf2 +Bxbw+HJoIfLbcUyPuJwzJMOTzAJWWvMswFcUpV6VtxkMQnVKtiTMQk1AORtbyEJfU4gCUkS JKETkBlUanSxcVFRkUkbPw1jMuSBquqDlYjF/X29/bA5i6MXWyYZScenmCu03Qx0L6Dyu+5s kJlxXoWsJ7d6oU4zTpbLzZ3JKTK6JYNJ6LbPJTL0XMF+zYVTCkhCnxNIQpIESegMEBk8HoNb bFOHMWkXfTTVcHjX9TiB64jJ0Ha11eyS5u9t8TzOf/OqW/iiH6grwSMcc4VZC1bEd81YLgZb mURw+OExAH/bqxRV62cEkpAkQRL6UAg67cfb7Q0MqMoO8lxs3M8C/APvsdhBbUcsSXu2q25O P4B9YiwApTnFiQX8C3sAUh7LcqgGPyOQhCQJktAHQ361+IJFxhzDcDIhkcU7KSQBBX/4fp9F M+ERsQ3K4TcKC/uLJ1PEyzhYeFSBnxFIQpIESQiBeC9IQpLk7BKK9rO8va9zEYd1AUg/8X+c XkQEwMleqKnpisH9rEvAOcw9vn///sTgT6ynkpICiL1qTcA2yTbyaadlweLLOr6riLRGA4Pp SRJqbsSHgSQkSc4qIcpwSv5uSckzzyoyDNw0OSGh6Ev9dBAZWT0sK9PQXCH8nEswtvzOzVcp 4Jn5zROW4NXvALTcEpph2/SW+JXTshDI+199Rwmxo1GKKr61F9GqUcSHgSQkSc4qIUFHWdJF /qRWNYdGmYuUEU/Yo5DFwxuAxwOFxahPbzSFHTfNKjX+ZkB+j/gU1otBE/yrvxSW+IyX6yHw RxmobT98cnNnZaN6y+loJ/4oOYXFvhi4wYKJf/5fNcYADJ2v1g9Le5kZniXukLHEybntAQuU l2M0FCILXuZwpB2tastBfkqJHhW1NwJJ6LOVEM+zsl4sjLgwqTzP3+yXYpFSpp+RLBOAL+2c GXMx3U33Emnh8j0sjWmHsrjnwpT388jDPo2lMYOwBibpUqX6IarhFLBTTegVifOcNFK152IZ zHoNsIg4vud3fWQgObSrXuIBmNhNhpSXJ3470it48td/d0vArqDji2XgtorDrjwXU16aWqvH iguRJNsiTQJu1siFnqtN4uKAbb/cNEA6ykG1Vdy5Is77FwAUKvmrodFgBJLQOZSQa+9Z0uH0 dg9iMJvou3D52T8m1REHdPa71Gc7+OQdzu3t+37ubmNmJNU7NQ5DLKB6pAE7/Ma2eo26PRtC ai5ixmqYl5u8Yeuqu5xXdaA3OnU/DUTyi6OJ+53DlDx3zcM1Wjd+MMJL5U6tJm5vqpGltZM8 b+dMfanSJ3g6kr7rbcMi6XyZBQOrRlhgprrhzHxyULtau10h8zRpqj6a1FkSf//x7LgdCYbW LS0XN3YEFIcbtnGcFq5YQo8cyACPVDgmSEIIJKFzKCF/MwqFdSovH1tyc9C1YB3rwmI2kHKe PRVxjYIs9aXNhQvUhN/e0TXauxCo3QaPrCqD50NsinEAaWMB870RGaF1xLmMZoDSsexha+Xr rh31DwzjjfaSRx7g5JWXrHvXvBeIRbMz9sPDQ9KBJZeITVe6d2SXVDpEMgHXkxuynihnM/Fd Xh7aIwaFlIYv/WBHSQtALlFhMM3zj5HrjSXfru4sbwmlweja82nr+eDEYkGFT45LXyqnhx4i vB7X1Xy40IuCB7yj5fN55CAEktD5Y2BDodHZQv8UJsOPIxiqtV6oW3WAgQvAY+UmEnEwxZ5C nFOYl2r5wX9PrmjTfCIacBbaoSN3K3V7iSBza4nJLVqsnLZ7GtWHFeMfN2SWEdDMbNULmpDi 7T1tkq2dCWGTBraycdHbP8Z3p0aWfFkz5LQ6o0qlOgcFx8oHKO0Nmewp1LDggkJM2u3KBNHc cz8oj+oCKLKMby21ujJRbLdVnSsnNX8nBNa/SmcymLX5NjeDdaVZtPX8RbmdgIyQNtHLsWhm TmWNHWpuBJLQ+aNu6vrDpOyxU4jz1k47npLHb56/relmG0vsiJchAqlvejpRQTguilCJ4AJx PanRFEtTVDV94O3W7cA20tjEvpoFpd98ooT1hJw9s5l7/qvFUBesVwjAMh3uDL3inpOz8acA u+Hb33nNJmeHPX1EijFfxY7Cge9NP9dFLEaTVtgHuBBvBnsZgc0VV/wgRBnrCRXn+AzaTGW3 AsPTuxVAvrIZ1hVbsPOeKoZ0XB9Jz1mL++9bzL3Ug1ezkskp8ZxJ1NoIJKFziH7SZQ3/7tMI 3DrQJx+1wsCw+GOoNmCTNodJiBEeFmkl/OphQ/SmUh8JuC26m6a8UiexsaLVr83JJWSkYJvW nlNVT+J3sOgsO5spa6tjDPZRlmI1EKn1Ct8qRkUJn9VYON3O32M6p4mHkJt0tcUSGlVobtme lgPWpSMJyYLcE7fs2uf1UKXUgRWg7dMaW2M5CVL+Y6UA9XerwEg5CztvTiNr9PLzsqiReI3R 4irbBuPj2xS4BxegF/QIJKHzSJ1eaELbqeQVGtOP4rHYwH2xYFgpqdNST5VloKc7voWZ9tSq Qa5CuY8N3BTzCILNdmCrOK1HyfhQZ0YFtpVQdrt3QjwmZON6KCET6BEmFwAM98o88e+u4vPt ZKUZeVPBTnBkiBDzWhvsYzbDzG9qrhjIvT5iCSntEPGF5tXf/CgPIcL7WE9oMR+T0MYkyKV6 YhLqrKyChKgI7Dytkmbtu4s9/DRHs1bqiri4YwkZ7NNRYyOQhM4jFovJrWdJ16bw3XQpN9qC 4ytPn3/WCeXfRjoBjJddKN4M8BAAdzNuTi7a8ne6raa0tLUv2rn2Ue4mQKq9vim3Wd0I0FLJ GZbRnR+Gwn2VpwBXXef7LaNkAJxyIohFSaGFL0oZWts1AngUEGrTlNSASag/f5sO6hkhbIBL Cv/7d32QqThFhv74jILY2tUCkOt2xZxldKsZIv5qJQdq2T6TN4OzMS/1JnqYNul2vJIQu7EC zZdGIAmdTwmdcZ4Qq8nft/bCalLZUiEkCJNvNsd5q2e1uz/czkuJl2cDW2YsNFeqLm5E98Lo rEJcHcgtRo6mzFm5O4NMlHf7Oue3syY7nPtDILho5bXe6enjwQuJt2p8ojszwZbbDjpejyGb r7teERa3Tl3h6BQBK9Z79wFvfEYWEwg+9/s/N4FTUMB0/epzXwuL9P1HIGWVLA7HFEMg6zdf NvgtmqdEUycywjo3gyObqB4czHnHEmq4MIQaG4Ek9DlLCMiTlj6VX2bcsMBDqbrCmrSZ7h3F 1IqniWp7G9JELEQaj0p+hHe6YahSvWupTwY8fzzjSkaHEx6YHV4qwQdT90QXHyfIARCbOUoB /utUEBl137ri1S7CiybUj20R7bGtctc/hkiR7eqMBsDNP9xnlm+Ei8elSnNcrYGe4D/iW1s7 qubUMGEHhMfjmFoyt11AuibOdSaonoiHQi2vESWrHRJlrytB6pWE5jec0At6BJLQZy0hoKhd 3JO1H6IAkNpcLKi4WBkZaeOiNJwpn4o93nimQytmjSGX/r1M/uHjPtS7Y80U28tk0MzeMW2I SMgzFodEvNj+mwXi2Ym0gh2ZVlNMS8OF7FetPWAmE04HEBWKF8QC86I+LlqNJ86QaFKKJY6u 6+8fUFMT0NuGcEBuY2Jn0hypwMuzabXuEeeKH3Yxs9bHHefw4uLTnBmosRFIQp+3hBCI/7Qg CUkSJCEE4r0gCUkSJCEE4r0gCUkSJCEE4r0gCUkSJCEE4r0gCUkSJCEE4r0gCUkSJCEE4r0g CUkSJCEE4r0gCUkSJCEE4r0gCUkSJCEE4r0gCUkSJCEE4r0gCUkSJCEE4r0gCUkSJCEE4r0g CUkSJCEE4r0gCUkSJCEE4r0gCUmSjykhMqpOxN8nSEKS5ONJSGA3mEc5fzfIcLLDoWZG/DKQ hCTJWSVEvrnmrpuUpJu8scN76xC/wR5gaFm3uzvVIITwcwonhd8wF+eZc1Fw4hi/nwbDLfM9 2CaFP23EOiULytDVKvbpJVA9Vj27OQtteNTSiF8AkpAkOauEcLXXnynNzMQLxzrf9szFazpA qohX6eb4PPcp/zmFMyKuX5+Z8VW8Ze5y4phf2DAMqvzLUjEeWNbVgaRTsiAPam4TTy2ALRM1 Etf9UHmCh1oa8QtAEpIkZ5UQj6Nws1gkkpKK5lKIAhKXxjscAWIxCFzZ59Mgp+AjTSCo3bti ie0kUmlUce+Excb0gCezWRQSm0tgUIBENeUd2oRIJfCwY7zckuni4uK60Wtd2G4BgSbeycIS U3mO6b4u5Fa3fypZIAAlU8OfhCex8eIsyXgiUUClMch4ujg565H3mDGPQD9yDoHAxbpMZOz6 CHRxaBjdcXdBJBr08m1DLY1AEvrcJZRtlfdy26yjXmcsTBx5URw2ZrXSv0gB45JQGnZkOHEZ e/KvupvXtrOBUrgsg4nBYcFJqrnFMruLKWgK87TslMP2NYdt7+9hwdJChrw4w8yvdE1hODfb Xa8KoFA+ZWMqp1bjR3e7wQyhiu8jwF96mMzGrRhRgeWcIs3rvZpbM7babJfguV1OxdeNxd9f 1J3gYtkMJYRt35cGmHyynLMtLge49uviq7a9m4ZaGoEkdF4lNOp58SzpGEnxfi6Dg609hQCP f+udmO4buANgva2pV3vnN1lAi7ty0CltjJcrAlbCVtCqeXBFIfREJmKiaQy1bjPYvRu8ONin mVqr61Mhoq2bb+fo1sbQBClKzVje+AfXa3Dc8Xj/DatUj2jnsBKN1I1R4Q96/Is+OXq3coZB +iGHLbWdbYyFV1650fdmlDxtfWfUp6cCgnfARuE35o+zu7OGgDmuO6qedDDJLt99lj97VSTO mcjGekYxM5rDqKUREpMQni6SkzqHyEXT33lXeJzUR7puORGX9QsktBF5VXR65sWEF3lzZ6vN 9fT2a7evAiz+m6cze/mrRWBvC/vo0j5/WAZiZ+jzAI5WOZ+Nd+oe6afo695ZYDnMrALQdDL2 hty/4bSmlVuFZlKk4w4KzAJSHYmD2cH6sKCRWFdXt9Jd3UnsyYi0Ifcb7vbyOd/YtuY57vvE grVvQ2atSq7ApYzDNkkONAGBfMY904bvfFxM1/4aqc+N+OEAShX/bEQvVFfyIGwqW1JZqt56 bVU//NBRiHs5Fi0Y3FJpZ6DnCCEpCeGLd3Tmdc4h4+N7gnc5qLBJp+PjlNTR4Of04bUbW3t3 bLrh1LvoeiA6llB2jUFN+qwqwP5zeRYMuK2Co1dcNLA7qxuxVtJf3wh8VukpTfULysHiJtnn +6JenxcSyktXXicTH/vMiYA94BSes7tfOuSYfusSRPzrXx6WPLsVpT1sMh68iQfBk2sLrbPx RmQoXjV0gn7l+4zw/MgYa+FrEhI9HckhQsOtjmhwLEmH0q2gYayzozHeaziTy2fKZs+0NmuY F7y6w4uuD+/RzuHcAcTfi4RIHp6+gclx545k/7Js+3f0hegdvt6unh+lKI5XZeOH127d1B93 zcdOy9s1SN3x6PllJCm1O0hfdLiUBlArxGIypnAUHhnexjpK4W73xCkEdjuNt+9s6M+b12M7 1XyX+NZbBwCEp0pm/FX3XmDNekkfdqscZ+9EZSe771Y3cxf+qKx9Qf1xvRo46832Y8diVBpk DJakAYZrFAbAWlmbTG7cNX/gi0kouxuTULnShNz0mBHAUyV5AUjF10Kp/xIbc+mzg6wrlame nv4PAwabAiqoxzcouH+9yxg9RQjJSYiRWObZ0BJx7mipyC/bFJ1+UwSfb7QXFj5KUQkHf8v+ 8NrVT1ecWk45Le/ciSbmkYR4HH/Hl+fUZuQB8EdGoW7GHQt6Wt0aKbFG+oepQr1l5pMSsJ38 mdq8GIVFrIXuYRLaMHAAdtIWJheI5scsXdvlJJt7acpGtyh7vMizdDRpD/u4GXVvb/XABWCo JtQJk9ANU2Dq3tK9484eGrMSASskHpOQO3aSTkaTAIaUa6DUi0MCrF82uvKwUjM72TzSvPRq Rtar+Ym4juBY9BAhJCghXk5kiwmOe+7AEW4ER0idflOmMxkDH6uo1r+6fnjtWmxoNr+j/hj0 F2sxeJzIcBJLDAVuj2A9Ib7KBvDjI6PxZNkrEaSWK3o4LKVJZLL9sr86DVg9JZbUi/k1ZHyh 5chN/sFteyAmxk8U44c2E+/lKN8wkRtuUi/gLgSovriONiwcIwPR6G57j95+Dyah276TeGuh thTgmxW+/4d0onFyEBMfvVD2RG4u6SrAeMAKJiFhLTgrbxlTyPbPKiY1A68aF/P97qt1Bqxz j2+QLNPARA8RQpISUrdqIp7Ly36SmvIuCSkYFn2skvhfx/0CCY16OpwlHYPz7L5RfadRQjOf XFumBpC2awA498qnsfauf0phDbpdNliWz1p8rhfdZqV4Na/3dtkyayh+pL90+k5lb9r+Ui/g rb2jEgpbdsdae4Veg6LMWc4Aa3M360X+9FbhTGZes5Wvg0Vt+kVMQlPf6lB7AxKLsV5j+5// zyxesHRt3fGq0o8Rcg0czFzzKg/owIwKA2ely4/remt9ZLkTUUulRQlj6iZGKimvBqIZ7ful 6CFCSFRCqfXU83jV5AbNd0vIp/BjFTVw2fMXSOiM84ToicK4JNsk3eRFe0GH1RDWdUnVAoip 9d8fVSjxAEqnt7Kmf5D3khmAUXeYehhn2g6I2hlJXQa+keFMncfhWFsth87Ou4euA24+KGzR 3P+JMfS59r0sgKSjuZ/jbusnspvXwkI7wkSJZ2lB9oLYJkWrX44CdPr6qy9GZniYZq3JAKR4 ZhKhKO4GGBsoWmnvJ7UwwS5M4SDRO1We0Rf32koObmN2HXqIEEhCn7+EyDEN4xgdWin67F4j AgAtQTyQ3DaR3VVfYYFtObasbdesm+AB2AXjyTUyWECEd8qd0pO3Vm0jOGQOi2/aTKtmPoYG QL056rnRi4VvfNVX4zW83pyxNWkKGPf2igeSSyfmB0xWDv3BcmqpwkPxVYPtdnvVSdzkTUeA 1qsm2CmdN4HY37I8uiiLFUexa1/d7nIgQ53qa3WLd0hB4RgCSejvQEJ4rpyxiRg5HIVLY2Fm oB2GPHLOTKrp4WQEGjOt0PQwLcvEhn84KEOJdkojkKgkFo57GDMLhh2HD/sogsKBQvEGkfDa PAZ23kAbCdvH5YrHocgiEy6ZetSjwVPFbcxQs5Mi8egUAQPbS6di10AhYNeAI0SrFR4Wh6fx 7UywHOiE1yN0roiEHiLErychuqkchin5nRmyT53b51wV85o42Lifnl0iwJ1ck90WYz/8kSRE fHk/ZILgTIu/fxUJIRD/ifkZEiLLVqh6rBjlLjj85AxZPINpQmTpy/909xw3aKSum6Rlf7xI PKbdFOTsTq6/rjLivrWHdklrO+xxr+lruz5cQsb1mYd3VJjlcbZ5vkhCCIRk+RkS4nKeaY93 LAZeC5bB/URi4uBcFkGwHBb+UzmxzELLknO2S2b8aC/2zHe3geq2/omUB9nRb526EmCoNxUf ufJaz+nDJIQnkfGO7qnyFMDza66MUtlv9+nwZPKJ3hGSEAIhWX6GhAgzAa11dYM7S4rmP7Vs mr2yNEHFOw3+1CRCluxY/Nwl50cR8cL+F7ti7XH0eeXWE0kLpNlvisEm+7uJunCjkaXXBh8+ TEIWCYNswtUoDgNKwy77u9il9L0161pqxeOEXpGEEAjJ8nMkZKh7+CmdcdcFyHUJuUZGkwBt PRZcwA24qKnt38q2lmqz4JlYOzS3LPepYUmH5f2MOvtbmQwDjcZDtyTo2pMLZVp0/KTawhkX g6/d4APLod1ovT8ayE7NCx0epk6tZChqXl5ukc87klDpvTnMawylLfovklBbSEXt7UskELir hLTN/0koDXw9//sPWl8PyvJmt5GEEIhzLCGvbhGPxxDllgXbgGO6RpS3cEmfuDOl1QYmDdsP XDT/+VlFbEX2pNmMZqpShpsOEaJzM/K9ffM95Zmp+UedJ1ohnZuwe/nroNIGL0ePO98b9hPt bfP9vTw7ebiKKz/+yFGzDI4WdCplKIwIc4/iMgqZBYCT33X/8J4QBSc3uWkV4Nou7qWVj2mu BQmbSUCScVcy1JPPox1GZXgcIVo6MtCJRkcSQiB+ZQnpnHqQe+F1CfEC795biHiy4RbQyWC0 BBw4DFYouw/tjSWqwXCX5wNmg+9GrJy2krT8tyqb0nsPg5mw4u1ePth+5UrWYL7VsUIYc994 qQ4y9HbthpLclqWcvbNlJsNnDcO5Fy57Nk3ikpVMnA+Smgc7rWZ7j4tmXxUqVOFfl1B3S/Tp N0XYelNC3JilGc7czQGROAvG+h/+LTVE3OPhOdkv7/v4TAyL05B6cxvVFSvvV1zCvyWhMSQh BEKSEur0zT39qE6c6isJMVK/Tt52DbjiKh8NA/vdDtjD7lppXTV1Pw9MxpPKqU1h63T2Dd+e lcqlQsCn5pfiN6KssZBM4ZnfxRnOq2ym74pL1AtIg/s++iD/TbdDXZ3VHzbzHrt5YPs5W0XG 1oOMYb/gyOP5vmDdHZ9FeO26yE/jVt51V5FvSkg0/df/CH2pNNLE3/6v9ssj/Avf/8fY4cID QYKtuf+333Sb+70podg/uCMJIRAShLqu4Sp/Gkbe+X6v94Q0KtZ14hS1TAH2tnNssF05Ggl+ S/PicMy2z7QzaZOG68rvqRcu84CQnJpGmfXFkg4vbakOGGoeRTl0E4JphVAskANhGjHRtwdS fog62K/xjWqY1PHNxKIicx8psnO56rRrWarMy5K5NRpGb7zMZ2mp2K6fetnyWdX5am/cZF+c 0Pzpjr4UBdv206z+04XDoR+co3WEgaFXhYn4C9E+JVfb7e58rsObEir9puy1nPtkBuhIQgjE x4TW+P3ffncaf/mHL1tePfwEr+5oHk06eWQTIGZ7dADbtaZRbzR1nwlFOkliCeVS6WIJKXfS gZbsn0aZipcCKDYIbRqOy5g8zEO6y7poM+NYQjOt0PJDfFdiTq3l1djxeGuxhEKNB2ZVbMdz sm2rXhSMV0vqbnvjqilr//j//vF3p1/3f/i+8f6Owi2ui3AdSW2RAu6DqMiUyEgzNhbjWacr G642D1GPxoQEPJqLdyCfKnizgtS+/S+v5fyv/8M1Fn/22kUSQiDeC6HluZLWaSRGCRNefzuW jP1lxTxTkSbVpXuK366nl0iHWK0OgdSaa7Opke06m3TjpYTGUtPwBiOPAKQi3VZo01Ha4tdQ gi63etqm8MELCeXk10HnDwdtaXyjjasD40oxYgkF8scDLDPVepd0d16WTN0LeXNxAOvxldDR /8++mYbDue0L/v4RcxSCaCKGTQ3GIhRBiVmZKePmcbdbCUlrUxyixFBmISjbcO5xCULMUcYg HMSQcMUQO9h29z79PKfvvX3O07e/3Ofp7s/9lkQk2VtCjtoR+f8+xDusd72r/u96f1lrvWsd WGyV5T+82xISwtxqTFC/TLZwL3sicNLK0wXK2E76+fqOt6dGZo7P/+LrmPnza2/lPHc98iUf JYQgxwi3PXLt4LOPHN4aE7KScxWuGiLv/HHEVne2YLW7ud13PNdW/ewT+9utQ70GNesOvbZK Q5YpT59xQNdby5SU5BpTojDznXI93y7h6XLppZepXlri/GlZDyKbvCs2rOWfM3IuycWamHYH uJwZVCs4Q0jIeN18R/aRZtWTyKG2N4VMWnl3CRt1IeI+6wO/yudX5wmN3Xgo7VAwyQOrioLF UIrhk9J3pySBQLr3FxIK/6PZ27udEYvWh48uSghBPi6hi/ILB55kqHq+9XWMHjG+u3TRwnXI gmTomXWhwt/MhEpaueJ74Vx5lwmjx7vM0STIoUPaVZoBBgGONhBaEnLH7ewPPskk6PG/qbUR fMe3nkNu8ykmclF1yYTbd5/6CR5nnVvSb50aYI0GXyYkVJk+0OviVrmj7zrxZsQ8R91T+10J 1XatWH3gR2n9+rINsm3A5oJwBCgpeNgUaOT3V6+RaL9cz9b3bezbOS87OHFQQghyrBI69Dwh isTD3XeUYZliQ6KYFi8oPQsnGg65ixnni8MCc2l0kzUnZv5DScW0QRqwLS5JgYG5RYpETZN6 IXHR2MWZ1MfSVVwg5ZwRGsK+mA757SWatNyw6YzpBhsqmG8J/dAjwbCyHF0efTi2lb03+sJ5 eZ/7noQ+be1YS3397ii0mEXa4CED9O48Id1hh3qUEIJ8JgmRGHujIRwGYSOSzdirc1Q789eL sKytSUCmsYR7JGEzI0nFlATiypWvDMIMf92cIQt7UmxhHhS6sPuj0/FqcvRuy4QtPJLbkS/c fDMETJaiHYeEaHT6XpYMCkoIQb40CR2doIkKveTtppRjL/WntoQ+gd9MQrotvA8PeZNoLBaV 9ZFvczQqi0X+6L1of0NAOEydv+VyBHkfkUpITEH/nK+zQuixl/r0SYhi7tFZnSacyESi/dIz u4NVBmPdzfbN2S0HOIZG+Imf39Hc3Czex/m1LEhAM4jP3Q2fef6BHiENDn5oyJ/Ea5hcGKPi i4McHyKVEHAtFttNuMdf6lMnIeasa5djxHpsA0BHvd17H+2Ale8XxoFm48hgX19332nJX8uB 1fNkABR3fH18fX39zR7+4ny4kyEr9OLIqLC3a51h1HJQi4q6lmp7cEuHLx6gpR7trSKJbw7y hUhIVJw2CVGeuU9M1geZ/cVXFxpjTX7R0NjameXA/f90dnx8yrjgetuvfRjkP9KyA/un12On psa1nkdnvy+Smgg/GKj8b3friXZOqNxm4EESYqtHNh9cUDv1u7EKKRNexSeyWiAoIZTQp0qI GxPSbk3kPuJjzlAqWhEQR7QHB3ToRAdLVzCo3bLgncokebyokZKS4pxp8pcAIIcS54XL6UgG OjrMXD4tfjxki31JfieTweCbqr9QpdB0B3SYkhQiWIJc7QGr2s06bs7cN/8mY0oj4tOkSZIy oJCARbemkQwkBdotYnwDnUGeFJA33PSIrK2EfTKOjs6gGJEDW1cnc2B3wOqS92ofldR+bs4c Xx3kt5KQAvcklpq18DEJZR7XrUz/Rgk9PEw6zsaLGeFLni0uEHf9i3w9SM2e8w72fZQLyXmO Wun3Iv9yto2vIJu2+1Bqy4YBmle7gl2Fq/iYk54jWSN63La7P0QYNrtNCpe2cSZ/TODYrrpF yOg/ZEO+o7enT0nCX4ukOzrVy7/vzAEDfzlTqE/tIEPu+dsG/BlXjXQvs8VpB1/vdqBtF23H uHQt2xE/ttF4JK7yIYNlUeEu69IvvHloh3D9jLT3sA2+OshvI6GrEaUns9i3PT8oITcX3eO6 08AfIv4GCc2lNx8mHbXU945ZauMlKaLlNfL7EQv6lreP6qSLt5/Uyu+/cb0X5fCjbylFoVw4 yRNoaWVTfLtl49RJR4c2HV61w3b16tkLuVtDPy7l908sxXMYoX7+slGh91ojUpfcnJuh47u/ eg/3rj4/d3lscrhTPyQFuC5y5qCU6EcIyl9f0jr4f8dlRGyub6smvHCOZw9/p6Wx6ig/as1Y M74w/SAmOpDW9tNz19XCvcKyLM/JnLHCVwf5bSQ0J6fUM5Z94hjrd5Rb+5CEIq/3Zh9PuTXb /8Hh0yWkeSFr9AMF6S/kvh6aofb6lt8667xWSIPJyDMkMelacYqkiv8DyZVvjDWBsmJWwgWP O7sSYoXJLvEeJC5nSpqoe/mZxvlGDTDaZ624Rlma0J+4/qhxZXTkuoZOoZyxDiHru/cY2bJa hAnrEhchXzVAz8TLc8C6S94c1OTOUEDR31HA9SyTZktW/NgIBtv+9brLPy8NQr6+Z4+dXGS3 pNij39XqtpVt70uHZedclmp9IiszcgolJKVSdi1RS+bEoTXxw53GDy3bOPevITLrx3IrX9n/ SPh0CXWk//BC68CCuHklZO+NQUu1dHtciPx5QwceuG/RqKGFdv1r/kUzgidFJXQgp0zd5ryR kJ7ycLzzC7PHJQ9c/9AoqVTeOrxlk8sKHXYzhOymn84OeSUGp5rS9LwyiMRpiSOF/ZupxF1K iE6eotqGhUBFWVUxgmgJqblvERLynRLQzwXTgf+4IAnIdSNRkqsTeiQI7UxUKh1SPr8WFPH7 Ss0or7fWFzIfFagK8MVBfiMJUe1VpsbzEk4cefPRKuEfmPJMcaqcDzieW1VObeh9uoTGHH+e 0Kg8KO/5mEeFryRk3R0PwLCTPicjza2V86NS7Fcdr1ac860VW5PrZQOnUX3WYE9CjJpvVm18 vjeOmdpI92kgZabou7sbp/DpOxMd0CzvM5vSdjEtE1jScg+IxPbGXf3NRbPE1myTAuSrjafR crw3H3lp2YDqRBgZFH3GBXRXZ6IerBEtJakbZlG5S97hAILp8pF2+bsbG1MOxtOBHpEr+79J Wj66D98b5LeSEFAF8Ta2JxKxD80cJjG0j6vcNvE89qdLyFBjvbEl/8C8zZlSr36GoMJo9ytk u/cjyQX3HrBzPOuoEKYS+1hsTV6aD5wbZo1kSCnf/dLGDPhmNt+4fLi31Glao4dumhO+svRd U5/u6ro5WEZ2vi4dWaJVifhjMaGe09xaS2xVJxZDi9q4H2ER/1v/SyYeMkJKacBb1xfQvT3J QJ/1SgLObXUPydVICRIYpBbNFYdMlPo1PFOKMoySf7L/m/wuWLLwvUF+Mwkh7yGiT/R0hytR mYLQwQzXGnrt2Xau09lxcTFeZ2Rqbt3QolBCEak51IvXGnNzc3XaiuICeUqJSpmC8GmzZJud zkDB4FTiwwGjkC22ZdPyXk+pPyRdm2u1djeVbF8ufMKzrWt002WzUqLn9+yHvyuwgfMFqjZ0 8fK4UK6vNyGhx0UKwKmLTREz+nmn0KA/Xd8k0N1BUSApHXvbti3k9n5ZbbYyyV/OA0NQQl+9 hBySD5OOvOJVpuUc4f1iPJda8v3EsxsyiRkpKj4vohXXipL4wG9PLJvT8fuTcoSD58TT4DMM SnbX9eXbjkOrmbmqTyNSZoeCbaWW/10m0D5xlfc6S96FzZjHqllZySBeNkPsR5UNlfSuOjYQ m4XB/+euKVz2vqMx2vU/R0K5/sFkMJguqAHOrPOK2PJ/lt05ny5bYh26EzIfNK11VkLq2WbJ fllNNmbssCIgKKEvRkKHXLYheb/Swd2ra5tIna1qthK4uB1bmVF9r3qwR6WKCiy7e3GqOnbj wc4ODrHDL/kAtN6E+fmIC5ZkquZc3EaehhMFJKJH7DPPF+99t6IG3tOfSsgopoPtKtEHA7sH MbcvlS4Kh3MYYSPLPOD2xozsXJhqZ/Brq6nAT+60B7alR791fYXqVY2Ae4UAgTPqUxsb1dpg 32myX9RLw7PxWBEQlNBpkxAAKaf4ftXurGSGrTYAs2HRnMbm8bm5u0PXoaaKfCmbcNNwU4PX 6aWapcV3tw0uezwU9sEYmX2hFN5bheNrKlwWppBS3O2iUfJ12Gz+q4Fwpg7xDy1TOo3H4wKJ OUgDYGtbA4nCoNIEBmRzE9PddOwqhTPawkt5b82bpw/QaVgREJTQ6ZMQYRHO3sstHK3mcN8Z /iXRSEAi0Wj77z/Z+vXQDMWA8WqD9p4cWHT+O/u/GMvnSP36cRaDtpeDFD5zRNSghI6EKCWE IF8nKKEjgRI6iQ/F9kQucEQOC0roaPUdJXTyMF9kYhC+ZFBCRwIldAKht+DI1RcNSuhIoIRO IGwrCgbhSwYldCRQQifxodjgmNAXDUroaPUdJXTyoDJwMdsXDUroSKCEEOS4QQkdCZTQZ4Ga 30LCKJxaUEJHAiX0WWDcL8WlIqcXlNCRQAl9FqjxmdgSOr2ghI4ESghBjhuU0JFACSHIcYMS OhIoIQQ5blBCRwIlhCDHDUroSIhIQiSrlvx4AtsWq/fn3bG1uUAT2z3L+1AOoYpECptM9gGn pcSsdjfoPPaBeUhJsj9YyJwevXBcpYUcOyihIyEiCZFL1dTUVFXVMma7Ge+dUhwVB0bbkpqq 2tW6wl+XBHtAF6iLO0qqqnOqWwa/OE3jU4BquPZMTLiT/NjmwO9MVY2mHypj1XKW10aDLlYC 5JhBCR0JEUmIMXzWeWp8ylE/I+z93O2znoFVhKzj/Ea6i9YN8q9dPbZTD+SA6+oBG9HrTY/o 758eqE7ikBs27y4KFVaXWH/gas9e7xr+gUUkp8U2bT9wcH9mgLUAOV5QQkdCRBKyTt+c7m0o LpYOy6dQSEDTfS0DKh26by2ApFdisV+pk8o192RhQ4m6d5prJewdWa/IqgLbRzbJr7S++sXm FnGMZM19NbmPRmWQqtwcM9k1P/33rGziwOR3QXzYbQvRiH/JROePLszMWmi3qKIbBgbWr4vE oL/qGJKojN32F3e7fM6c3ibvGIi1AEEJnT4JcaO73vSEDLf6uhdLzYm7MGzO+PUFvSgBXuIG iYBbWzQ+AFTFNCc9U6I9wunz8yu1FGPlGJXNh9JdjYXSoFXeTOWRW8L8/PTy2UA2fNlQb2PS JHOZft/n+T92cgFmbj6j6jYzibSF/RxQPKPZ4bRox7wkIRFOhvshqg9LGwJDhSNMzVsvTfL5 QA6XaFgMFxaL3qnWApC/He2HtQBBCX1JEnJ4eKinoB/3RkKjZRMB48EREgBb+lrbGtd/SAGe fN7uqT7XEHMYG3G9MN71jEyWDki4OuI7K2YX8UOWvSAuYjfJ9q1a3fAKmfm8rOjLoDhfNuQf tHL9ert2e156k1YKCR5cayPZpz8hHPZYvx+Knw7Nx25GVOrnZTkYQumd8vTtGJkFEgysdW0Y OTiaQGberbMTHsKMqQPCcfF+/2hxrAUISugLktBcev9h0nHGvz+3MT8/Fd0OoPHniRv19+6m Ame+QKUhyv3bFUJC87vJctMLwguX16ctSxP003KnhqIC6zWGbQRqN83yucYhpQ/DGha+ka9i 1cruOElffbHNCzz77fLa5YZWl26BR950u9uEDdReawO9pxmSxH02t+DJv15Z80j/caKtfkR2 jb516+5cg4JWV7bBio+Knnjj5jCnaugHo9nAN+W0cN4MEmAtQFBCX46EqirkZy4fSM/D7NBX QzdS83+6kign5/X0PCGHsnoKDA4tQeZElxSQLr6oeyOhwViv8IvKXQriJp1lG/lmynWWNv1b PJK0/ChQHZ6bXUjQdztbDYx0L0WA0GC3LUuZOGvChDI7Bowo9RuStdeVrIPutoGJ/D3CJBmR JnD7Zh0fLDb1AYq7dpgvN8ftABpdhvsrv2/s7pa+5t4fqOW6PxBN1Z6/e5WJlQBBCX1BEtJU /68/u024H4Bc60YH9dVTUF+XaBkcHGBaAVR6xQMwh4ygan2KOHtZefSNhJgRieF1f7ojl5Xl 9S8xvCT5srPzNXYUslNiNZCNv9lRnVseDeSAYmywNgB9VasuzdORLZTQkpVUlPoaXVH9isTj shQwkVMJJSTkbgKzypcBut0SAEw25jKLE2e5AKVucgo7/9667tb0B5lFCwf9/ZlBgjotIx1c SIqghL4kCRkm3HVRGzY6gJ282zqvWkLcaOP4vWsq5QcB8oeGocM/gQxgL1v9RkLN6zJ257+P Vro3WfuglC/VfGPDNXipkLXYNA1s16yxwr5Cwj4k03RPHlFSo6wHes7jhEI03bZDCQmNWoF0 iLP7rRp4KP+AkJ3SBCGhK/3AuuRfSQKTvKstvXIphLMkXBLbhmUvnE9Nna4fEzeO4b75Nfmx sfZYBRCU0BcloT4j3yhtZuZBKIrtPYV0z/y9a/KacoQSWoUBGW860TC5PgvaiRrCM4oVV65q B4Uo5dOksp9tWZlkgyAt+nkSJCU2AsU/4vX1JEl1L3MAK+/IXos4M6Kw2ZHDZNpF/epQECsp /49vayA5UYPw3FxIGMzKXgKWpUwCCR4GXG0p3azMBEhxS7BfLeoBqiCplxnYFb0/70inWpqB VQBBCX1REjI0Mj7c17FouaS+wsJCu3xdVsCmIkD800ogORbV2FblfVsCvJBg4mSzirJ3P1nc 0bNYsWrGt47pGCyeb7tQ0Av1BQmD3HXXNxMZJ8sfm8ZvJc4PBPqqc4TdsZGOlqDYWsJ4POf/ ++cVkqGD2+18W58XejD9wgJYlyfmSZDmaJS59UI5yDa+wrWU8Vh22i4/zLfSNtA7dl9CBno9 YtgbQ1BCX5iEHJIPk46x9N2tzaKi1iuu97lLRUIJbVYQjaDgO5G+P/11BULd/761qPXp2akw NnBKsxJ93AoqChkeWQXrwV1X46FH+c9Gmcbn3qzp6I4u91r3n7rMGjOuJLpjzIDvXUtmHKeF za4G5T+u0Ohtrd/4+v6LrAk8vmUBZAtvI4C0qeGcHq9NFy1/t1ou9MdcSXRr9WqTqnIO2JfQ gFGMHxvrAIIS+rIkdLjJiizx6eVVI6NVjQeXGBYXDYjOlIcJ0fLYyphfVpk2BbbT8KrR6vBs tnAY20phJmPnUTZAaO9STEVjIRl4KwkeAomGN0tfpS7d26iYFmeDpMRlonnEEK9d0LsU1iHs StElGvtooJNSUaHaeXEAOlYGgTXodwkgM82CPuh0/8bkZJQtkUP3zHxAhoI2CM4k76/y0E26 kU3GOoCghE6jhA7E6ldvxtobmhmkH3Adnf7hfNmhH60YuEYM+Y1ACR2J31pCCHL6QQkdCZQQ ghw3KKEjgRJCkOMGJXQkUEIIctyghI6EFUoIQY4ZlNCRYKs5o4QQ5Fg5moRI9MHMzJavF6Zm jG8SSghBPp+E6DVX1dRUv15UNGTdio+wfgolhCDHLKGOievp6SNfL9FxkUrxLJQQgnw2Cfl9 O3T/fvvXy0WPGkPaEaKLEkKQY5bQy5s71K8b1pGWkaOEEOSYJSRRpoYhOwIoIQT5KEeU0Is5 DNkRQAkhyEdBCYkSlBCCfBSUkChBCSHIR0EJiZIjSYilLfYrR/mCdyZHknSlMKzI6QIlJEoO LyF+YM35ZaXRZPq7h8NrFtRUb4uzX+9aWTxJnbzYx8bIIqcIlJAoObSEyMkOd2Qjm266KVi9 dZQ6sN0ql6h807Wb8iqVk4yX/JXrAYEYWeQUgRISJYeVEMsytvXR1uXkIK2mxbe6W5mjLqs9 PXpqZ4f7hLukHP1rT3q21ApUMbLIKQIlJEoOKyHK8K3VUOIvLehKej/AoHTt40VbgH7jrIfE 0Zzl2kJhKlLLeTUucfaKJ0YWOUWghETJISVE0s6S19xdDpJv1HobrOtksro8VePZhauJy5ot HHr84KtRIIoYjwrUh0V5GFnkFIESEiWGRg7Jh0jGEn/q/GrUhx/14h7bz83YwlZFbsmULe79 +5AKBXP222tFxF2a2jGyyCkCJSRKDOeiOw6RjHVG2fH1Vu/dGcXxYGmA8GhlJ6AmL3v6eyXu ZO+ntUhXHtXByCKnCJSQKNEMUN4o+QCLzN1OGC27KJa1ewHbo2y0P3JYQByrubkmPDXWaCb7 olJzL0frgJsPJDGwyGkCJSRKxpz/yz//jw8QEkbeTReqpZUJQKVTWpQKLgZmZRASAr2yJ9bN xAaLYTenrLKXY2acLw/jipwqUEKipCqhQMPjA0ho77aEgDEl+0QKbO4Vt7v7NmsG5xUSbaKg mxcDR2aFOiK1la3u5RhaPcvCuCKnCpSQKDGc088+TDpymrNXdZ9lrM/1H6P4OmpyGZlW0j7+ 9obeT4eT+zvaPP2T9lJKzs5yMK7IqQIlJEoMjRxMDpdyy19G7UlFwd/fWdRm2Z+Tq2uP8fUw 4Pf6D0WbVfhuTr/pgmVWaNAxrsipAiUkSo6wdkzzfEz0/LDRiMsKsJNTx2N3/KxIwBlbi3Z3 WE5hvvlGb1Uyii0h5HSBEhIlh5cQADOsONl8QPxZNwArf0s6m797VNBTv2XH3U/FyrelYlyR UwVKSJQcRUII8pWCEhIlKCEE+SgoIVGCEkKQj4ISEiUooU+FpKNQZ4ijX18HKCFRghL6VGh9 Af6lbIzDVwFKSJSghD4Zjm14KA3D8FWAEhIlKCEE+SgoIVGCEvowpuJSGAQEJSRKUEIfZjZB G4OAoIRECUroI/G5jC0hBCUk2pcMJYQgHwMlJEpQQicKwQAZg3ACQQmJEpTQiaJuWxKDcAJB CYkSlNAJgqqosZG7t5N/hokROSmghEQJSugEQTHtvczf2+m7aIsROSmghETJiZUQiUL56h4G icInk/Z2KNY4PHRiQAmJksNKiCQlqTM4yDzkpBkSifTWDof+6nXiSx5+qRVL02MxFx8PcjJA CYmSw0qI/DJjZ1vjgkZ18yH+fyZ3OFly9vdKVReFnQzGywXFQ5aKmnN7Klp9zo+DDwg5CaCE RMlhJSQ1/7uhiawsuWsj/dSPJmY3qF7U3b8079+KxImLeAHllocs1cDknYkHqgVZ4l9flww5 iaCERMlhJcQd8fIIzM7u3iiv+PhHG5qYIm+/wSQ1/v/+aaMKQDvm5uVDlspywrtXZ3DG/0EO PiHkBIASEiWHllC0Z7zwr2l6QTLww5SWJjvTWGBXWjMzd7V6q+FqwHl7CliV3ktNXVUQkM3D whnZKUkLRhm344G9Ue52V4UDkvN3LgHVLkhpcvtRB5kiPqp6dVWp55Lq6uRLBoBkW8akWv3r WTLxKxaExPTiLpjiE0JQQqdeQg7Jh3oK+t5jNOFG0N2LlDFn5fUROeeHbIngzQlXue98Nbyv 3MyTBJNzbtHprevFVu3OdWJ1d7TifN1v1VH5Zs435LL0wHqDkFDmsk9EjO/T1VAp1ee34uSf dw07+F/3sYHcNc84R+eINsb+LZk76208fELICQAlJEoMVw/ZEtL3zmYJN57cXVMcTZxm6vTK deX0nL15cbD0+7LGlkAXL1uIGikdsAlqusBbHCkRO/8nV5OBMGV9A+upkeS1JkdJqQBCQv1x dYNMmwj3FvLS764Odkf8lDcwUHl9i1RasBreYncuy/TNZzXe8ouYQRY+IeQEgBISJYZL/itM xfiDsOG9L6Ggsrqwbf1AAEb0na1SnzhzKPTq6gPQuNIHOYHaOXpKZY68XvUgsRnlBWsYdE8X cKe6DHnbBXV9S+WWILCP53X0enllko1a08D6XmQ1QPVmUujCHx23wkqLfqqxfn1Dq5pN50B8 PghK6NSTb/Rj5OqFygPIM6seoL0roZKyZ70BnYXEVkZ5SspUaiYEui2LASi1mgLz/nTqBbPy vFxpQkKTE3oUsHGZD+VOBfeBfcTQaIXyJWB01ykpLb2YGKBkTDSDdu2GE8DjyKTMzudZFRsx kb4poa8Lluyqlfx1PhIEJfR1YdDWdEVL5iCyhhKyqa8lJGzuEH81yv0sAnaE2zvK9QobMy0Q OLFKtJeuhtjxa8t91YKC3AJ4hIQkJyfCyGDuv0FIyHUMwEk52F25Gbrdh/Ju+wVHMskZkeKg /cjsPsC03KLOvd9F3348PacqYfC6YPe9L3Lx8SAoodMPTUyzueNgmu0MXg3ScKPPGe66IcQl PP7CuR4AtpnX2JbjPUJC7kvaAMtDfVXq56QzmUlyG7x6/duSne5phIS0xkO5jsHZNGjRuP7P t8agUXbSNjdXPzGTsix3CbQfqNcALCQucqdvBonl5s5WvtwzT18DDkojKCFkH+uRb8Y7Va5W nvUt5XKelev3NkyuK4m9dMjIAfuigEEADWVDw66mRvtFx786aN+Pq+ZltL4kg11irIA+MtHM ArKm1t8974CSnyrtTdau3em3WtrsgUFVzxQAFdl2lkRTukJPe1ZX+N70xP6ZmhYMO3IyQAmd BPgzQ/LyciFPXZyIHdsA77wNn+FwisW9Nh6YTlWHAsyOKHIX5IyHd8aLVgUWnb26T8b7qZCT oELnpG7bCAeWLnr5mMLl4PUdpTz59A7dIDNNEHhMpgF4qD8EnYXguASHrPNvFpHrpWeEY9iR kwFK6CTAstErLe59KZ4jnMjDkuxfWTjDY4EBM5cC9LEWFoC5pTVJMuzxmjjTvp9tzdSl5ldx SMAZU6Sx7Ex3mzdSVT26wKiKKjmT3zdmzRrItgKqJNMKIHPMAGj0sWfnF/sM3txwsNtcCsOO nAxQQicCEpXN5++vxdBRZL85sztqxCITf6gtOYRvXqXa/apGou1tCSELv6+F5rw2DW1vStDr v5LxBm/dj0bDmCMnBZQQgiCfFZQQgiCfFZQQgiCfFZQQgiCfFZQQgiCfFZQQgiCfFZQQgiCf FZQQgiCfFZQQgiCfFZQQghw3/38ArDlYVQ0KZW5kc3RyZWFtDWVuZG9iag0xMSAwIG9iag08 PC9GaWx0ZXIvRmxhdGVEZWNvZGUvRmlyc3QgNS9MZW5ndGggMTM3L04gMS9UeXBlL09ialN0 bT4+c3RyZWFtDQpo3iyMvQ7CIBDHX+Xe4AoC6dCwVNswtREGE+OAhJgYK6a9oY8vKNP97v/F GTTQddinV1rtx4dYnk2B5Nk4Z2yBi4Ja42mn0ZKnkhktA3moxpDelDXnsqZ+Pec4yLaiANXU 5LymYCNdcT4O6OJOaBb/iP3/mBtepvszhrJmFgGs9rT+CjAA0Pktmw0KZW5kc3RyZWFtDWVu ZG9iag0xMiAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvRmlyc3QgMTkvTGVuZ3RoIDMz OC9OIDMvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN6cUm1LwzAQ/iv5A5I0L20KY+DUgaAiW2Ef xj7UNbiAS0fbof57c5d2bt2UKuF6T3Lvz5VzwggXRGhBuCRaazIa0Ulem2npGprZramfzPus 3ObueX41Kd+Kx4zeuXVZWPdKF9Zdu9oe7lNb1c3NJq+I4BQy3Jp6XdldU1aEM19qRh/y1iPi EZ3vX5rPnaFZtTcZAvhg6YUtmk295ArCjo8QAoX96SSckzhOUJ9bUynBJ9EkjiJ8USpubRFj lxIqFpykD+10aAtu3Kf6Rtq/A1ZtJvTV6WGM0JS3rsbjX+j/L/NR2mNe6sHMS6Z/4B7sgEHD kEjIAAnUeBzL3m5a5DcAZAVSsKJO0U+3OuwGIgCBP/iChD32D66InWrIe9pRh5ILs3RdHM8J 9ToMGaXGWnr4PwlZMVJKv/glvXeF+TAFUTD4zBOrCG5u9SXAAAXr1lANCmVuZHN0cmVhbQ1l bmRvYmoNMTMgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0ZpcnN0IDExL0xlbmd0aCA0 NC9OIDIvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN4yMlUwUDAyUzC0VLCx0fcrzS2OBvMNFIJi 7eyAQsH6LnZ2AAEGAKOhCMsNCmVuZHN0cmVhbQ1lbmRvYmoNMTQgMCBvYmoNPDwvTGVuZ3Ro IDM2MTQvU3VidHlwZS9YTUwvVHlwZS9NZXRhZGF0YT4+c3RyZWFtDQo8P3hwYWNrZXQgYmVn aW49Iu+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/Pgo8eDp4bXBtZXRhIHht bG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA0LjIuMS1j MDQzIDUyLjM3MjcyOCwgMjAwOS8wMS8xOC0xNTowODowNCAgICAgICAgIj4KICAgPHJkZjpS REYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgt bnMjIj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIKICAgICAgICAgICAg eG1sbnM6ZGM9Imh0dHA6Ly9wdXJsLm9yZy9kYy9lbGVtZW50cy8xLjEvIj4KICAgICAgICAg PGRjOmZvcm1hdD5hcHBsaWNhdGlvbi9wZGY8L2RjOmZvcm1hdD4KICAgICAgICAgPGRjOmNy ZWF0b3I+CiAgICAgICAgICAgIDxyZGY6U2VxPgogICAgICAgICAgICAgICA8cmRmOmxpPnRy dXRrb3dza2k8L3JkZjpsaT4KICAgICAgICAgICAgPC9yZGY6U2VxPgogICAgICAgICA8L2Rj OmNyZWF0b3I+CiAgICAgICAgIDxkYzp0aXRsZT4KICAgICAgICAgICAgPHJkZjpBbHQ+CiAg ICAgICAgICAgICAgIDxyZGY6bGkgeG1sOmxhbmc9IngtZGVmYXVsdCI+TWljcm9zb2Z0IFBv d2VyUG9pbnQgLSBzd2lkX292ZXJ2aWV3LnBwdHg8L3JkZjpsaT4KICAgICAgICAgICAgPC9y ZGY6QWx0PgogICAgICAgICA8L2RjOnRpdGxlPgogICAgICA8L3JkZjpEZXNjcmlwdGlvbj4K ICAgICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIKICAgICAgICAgICAgeG1sbnM6 eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIj4KICAgICAgICAgPHhtcDpDcmVh dGVEYXRlPjIwMTQtMDItMTJUMTU6NDE6MzMtMDU6MDA8L3htcDpDcmVhdGVEYXRlPgogICAg ICAgICA8eG1wOkNyZWF0b3JUb29sPlBTY3JpcHQ1LmRsbCBWZXJzaW9uIDUuMi4yPC94bXA6 Q3JlYXRvclRvb2w+CiAgICAgICAgIDx4bXA6TW9kaWZ5RGF0ZT4yMDE0LTAyLTEyVDE1OjQx OjMzLTA1OjAwPC94bXA6TW9kaWZ5RGF0ZT4KICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAg ICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAgICAgICAgICAgIHhtbG5zOnBk Zj0iaHR0cDovL25zLmFkb2JlLmNvbS9wZGYvMS4zLyI+CiAgICAgICAgIDxwZGY6UHJvZHVj ZXI+QWNyb2JhdCBEaXN0aWxsZXIgOS41LjUgKFdpbmRvd3MpPC9wZGY6UHJvZHVjZXI+CiAg ICAgIDwvcmRmOkRlc2NyaXB0aW9uPgogICAgICA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91 dD0iIgogICAgICAgICAgICB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAv MS4wL21tLyI+CiAgICAgICAgIDx4bXBNTTpEb2N1bWVudElEPnV1aWQ6ZDZjZTE2ZGMtMDdk YS00MTc4LTgyZWEtNmU1MWVjOGUyOGE2PC94bXBNTTpEb2N1bWVudElEPgogICAgICAgICA8 eG1wTU06SW5zdGFuY2VJRD51dWlkOmY0MjgzNWQ3LTY2OWEtNDVhZC05NTFjLWI4YmI5ZGFj YmZkNDwveG1wTU06SW5zdGFuY2VJRD4KICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAgIDwv cmRmOlJERj4KPC94OnhtcG1ldGE+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAg ICAgICAgICAgICAgICAgICAKPD94cGFja2V0IGVuZD0idyI/Pg0KZW5kc3RyZWFtDWVuZG9i ag0xNSAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvRmlyc3QgNS9MZW5ndGggNTYvTiAx L1R5cGUvT2JqU3RtPj5zdHJlYW0NCmjeMjJXMFCwsdF3zi/NK1Ew1vfOTCmONjYECgYpQEiQ gqBY/ZDKglT9gMT01GI7O4AAAwBo9Q4NDQplbmRzdHJlYW0NZW5kb2JqDTE2IDAgb2JqDTw8 L0ZpbHRlci9GbGF0ZURlY29kZS9GaXJzdCA1L0xlbmd0aCAxODQvTiAxL1R5cGUvT2JqU3Rt Pj5zdHJlYW0NCmjefI7BasJAEEB/ZW7uHtxsVhfaIoKYqxCw2ItQ0uwUB5dMmJ0YP7859Oz9 vccLb+Bht6sOk95YjMqkd57LnWx1FOyUeGg6RdN8BF9vfahDHbf1ZrP2ceX96p9azPbcC40a XcoZLihlMSG64IKtTpxeR1rhNPUo5tAL/3QKDRWlnFHg3UUX4Wq+aEjL2NXa6pM0oznRwhb+ VWh5RmmZBoU1lJnSNz9QHoSzG0d92v3+T4ABAElUSCENCmVuZHN0cmVhbQ1lbmRvYmoNMTcg MCBvYmoNPDwvRGVjb2RlUGFybXM8PC9Db2x1bW5zIDUvUHJlZGljdG9yIDEyPj4vRmlsdGVy L0ZsYXRlRGVjb2RlL0lEWzw0NTE0QjVFN0REOEFCMzE3MjZGODVFMTMyMjE2QkIyRT48Mjkw RTVGNkM0NUY1MUE0NTg3MTQxNTU1QTE5RDBFNjI+XS9JbmZvIDI4IDAgUi9MZW5ndGggMTAx L1Jvb3QgMzAgMCBSL1NpemUgMjkvVHlwZS9YUmVmL1dbMSAzIDFdPj5zdHJlYW0NCmjeYmIA ASZGRre3DEwMDIyNIJJLFESqngGR+mC2FhOIZJoPIhkgat6DSOZgIMnYfwGs9zlYzUawmi4Q yZ8DZk8Fy4oBbfnXYAoWYWBEkKz/QCQjhjjjPwSb6T9EDUCAAQCJbw9NDQplbmRzdHJlYW0N ZW5kb2JqDXN0YXJ0eHJlZg0KMTE2DQolJUVPRg0K --------------090105050600010904020004-- From stevek@tagvault.org Wed Feb 12 13:39:52 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2B4B1A0006 for ; Wed, 12 Feb 2014 13:39:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a2VVK7ef9gJf for ; Wed, 12 Feb 2014 13:39:47 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1blp0186.outbound.protection.outlook.com [207.46.163.186]) by ietfa.amsl.com (Postfix) with ESMTP id 8A9DD1A0005 for ; Wed, 12 Feb 2014 13:39:47 -0800 (PST) Received: from BN1PR04MB060.namprd04.prod.outlook.com (10.255.203.28) by BN1PR04MB057.namprd04.prod.outlook.com (10.255.203.15) with Microsoft SMTP Server (TLS) id 15.0.868.8; Wed, 12 Feb 2014 21:39:44 +0000 Received: from BN1PR04MB060.namprd04.prod.outlook.com ([169.254.14.121]) by BN1PR04MB060.namprd04.prod.outlook.com ([169.254.14.43]) with mapi id 15.00.0868.013; Wed, 12 Feb 2014 21:39:44 +0000 From: Steve Klos To: "mile@ietf.org" Thread-Topic: [mile] CPE and SWID Thread-Index: AQHPKC0ME8H7b2A4I0eaklYYfouQnJqyDQlw Date: Wed, 12 Feb 2014 21:39:42 +0000 Message-ID: <15a3cb413f16438f9105f637452cd840@BN1PR04MB060.namprd04.prod.outlook.com> References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> <52F2B782.2080104@gmail.com> <52FBC492.8040700@gmail.com> In-Reply-To: <52FBC492.8040700@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [98.248.97.172] x-forefront-prvs: 01208B1E18 x-forefront-antispam-report: SFV:NSPM; SFS:(10019001)(6009001)(469094003)(51704005)(53484002)(479174003)(377454003)(164054003)(13464003)(189002)(199002)(24454002)(63696002)(79102001)(76482001)(76796001)(66066001)(80022001)(54316002)(65816001)(74876001)(74706001)(69226001)(83072002)(81816001)(51856001)(74662001)(81686001)(33646001)(47446002)(94316002)(31966008)(86362001)(46102001)(74502001)(94946001)(93516002)(15395725003)(92566001)(15975445006)(54356001)(59766001)(56776001)(53806001)(93136001)(95416001)(77982001)(4396001)(50986001)(47736001)(87266001)(19580395003)(76786001)(19580405001)(83322001)(49866001)(47976001)(8558605003)(85306002)(15202345003)(74316001)(80976001)(87936001)(2656002)(81342001)(77096001)(76576001)(81542001)(85852003)(74366001)(90146001)(95666001)(56816005)(2004002)(24736002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB057; H:BN1PR04MB060.namprd04.prod.outlook.com; CLIP:98.248.97.172; FPR:CE5FFDE5.9BFA9785.B9F1F167.4EA8E9C1.209EC; InfoNoRecordsMX:1; A:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: tagvault.org Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Feb 2014 21:39:52 -0000 It appears there are some misunderstandings. My comments will be bounded by [TagVault >] and [< TagVault} as I don't rea= lly see any way to do a proper response to e-mails like this using this typ= e of messaging system... My comments are in-line in the message below. -----Original Message----- From: Blibbet [mailto:blibbet@gmail.com]=20 Sent: Wednesday, February 12, 2014 11:00 AM To: Waltermire, David A. Cc: mile@ietf.org Subject: Re: [mile] CPE and SWID Yes, you can simply ignore SWID. Continue with CPE. [TagVault >]=20 CPE's can certainly still be used - never said they could not be. SWID tag= s provide the data required and provided by publishers to construct the CPE= names, with a few key exceptions: 1) Not all data elements are structured in the same way - they will be cons= istent, since they are provided by the publisher, but they will not be exac= tly the same as the names that are created by the volunteers who create CPE= names today. 2) The data will be provided by the publishers - this ensures that the data= is consistently made available and will not change depending on who is cre= ating the CPE name. 3) The data will link directly with inventory of software discovered from a= device. Since there will be SWID tags installed on the device with the so= ftware, those can be directly linked to CPE names. There will be no more d= ata scrubbing, nor assumptions of what matches what. The data provided in = the SWID tag will exactly match the CPE and any tools that are managing a d= iscovery process, regardless of who makes the tool, will provide exactly th= e same data! [< TagVault} Just like you should have rejected the Microsoft inclusion of PowerShell in= to NIST SCAP's OVAL. :-) I believe you are incorrect. Perhaps you have been mislead by the SWID lobb= yists? Have you joined yourself? Answer: probably not. [TagVault>] TagVault.org is not a lobbying organization. We are working with producers= and consumers to ensure the data structured is provided in a manner that w= orks for both keystones who need to either create or use the data. [< TagVault} Re: cost, Wikipedia page on SWID: ----snip---- "The organization will act as a registration and certification authority fo= r ISO/IEC 19770-2 software identifiation tags (SWID Tags) and will provide = tools and services allowing all SAM eco-system members to take advantage of= SWID tags faster, with a lower cost ($500 per year for individuals, $1,500= and up for organizations[6]) and with more industry compatibility than wou= ld otherwise be possible." [6] http://tagvault.org/documents/2013/06/membership-information.zip ----snip---- [TagVault >] Yes, that's what TagVault.org is. There are other tool providers and other= approaches that can be used - with all of them ending up with exactly the = same data structure and format. There are open source tools on the market = today that will create tags. There are commercial tools on the market that= will create and install tags. There are commercial tools that read tags. = TagVault.org is structured to ensure that the very large software provider= s have a clear and concise definition for the amount of data that must be p= rovided. Smaller orgs are not likely to need this level of information, bu= t with the disparity of platforms, dev team locations, dev processes, namin= g conventions, languages used, etc, an organization like TagVault.org makes= sense. There is absolutely no requirement for the company Blibbet works f= or to join TagVault.org. If Blibbet would like to help specify best practi= ces, to test use cases, to work with IBM, HP, Microsoft, Symantec and with = other SDO's, great - join as an individual member. Unfortunately, in today= 's world there are costs to manage an organization - program managers by IE= EE-ISTO, E&O insurance, resources to write, edit and distribute materials a= nd tools, etc. IETF manages funding through a different means - meeting fe= es, meeting sponsors, and others. There is money provided by someone, some= where along the line to keep lights on and efforts moving forward. At the = moment, TagVault.org uses membership fees, that will change over time. But= with all of that, there is absolutely no requirement for someone to be a m= ember of TagVault.org in order to produce SWID tags. [< TagVault} Have you read the 40 pages of legal fine print required to join? How is thi= s a good thing for IETF SACM and NIST SCAP-related standards? [TagVault >] it's not particularly that fine print - it's in a 12 point font :-). It's = also mostly boiler plate text on how a non-profit works. TagVault.org is f= ormed as an IEEE-ISTO program which means it has a program manager and a bo= ard of directors to oversee how the program is run. If anyone would like t= o read the material, it tries to be very clear and very transparent about h= ow the board operates, how working groups are formed, how membership works,= etc. Non-profits require these types of rules to ensure they are operatin= g on behalf of their membership. Personally, I'd rather know how an organi= zation works and what the expectations are than not. I'm sure that the IET= F has similar types of documents that define how its operations work. [< TagVault} Besides the freely-available XSD schema on their web site, are you able to = access ANY SWID tags? Answer: No. [TagVault >] You are incorrect here! Any software product that includes a SWID tag inst= alls the tag along with the software. If you have access to that software,= you have access to the tag. This is one reason why this approach is so mu= ch more scalable - data is provided by the publisher and there is no centra= lized catalog that *must* be referenced. Will there ever be a catalog put = up by TagVault.org - perhaps - if that's something that members want and if= there are funds to pay for the development of such a repository. I can ea= sily see commercial and open source systems that create their own catalog a= s well. The key here is that the SWID tag travels with the software and pa= tches, there is no after the fact work that's needed, nor is there any thir= d party work that's needed. [< TagVault} From earlier in thread, the comments from Symantec -- one of SWID's foundi= ng corporations -- are fine for large commercial corporations.=20 There are still massive SWID barriers for open source or Free Software.=20 These barriers will ensure that only large corporations produce security so= ftware, which is bad now that the gov is finally realizing the value of ope= n source. [TagVault >] You may be surprised to hear me say, I agree with you, but I do. TagVault.= org is working on a few avenues to mitigate the issue of FOSS developers ha= ving access to the materials they need and in having some added benefits th= at come with SWID tags: 1) TagVault.org will publish a compendium for the standard. It will not be= the official standard, but will provide the data required to understand th= e data elements and attributes, know how they should be used and the detail= s behind how the data is used by consumers. This document will be availabl= e to anyone. 2) The best practices document we are currently working on will also be ava= ilable to the public. The standard itself has to accommodate every use cas= e where someone wants to conform to the standard, but the best practices gu= ide will focus on what data elements and attributes need to be provided by = a publisher to provide the most value to the SWID tag consumer. 3) Should there be a requirement to use SWID tags in software that's purcha= sed by the US Government, the 19770-2 standard will be available for free (= as mentioned in my last e-mail). 4) TagVault.org is working with a FOSS proponent to ensure that the revisio= n provides added value for that community. I won't go into detail here, bu= t I can ask if there is a venue where these types of discussions are happen= ing and point you toward that venue if you are interested. One other thing - we do have a fairly strong open source presence on the IS= O working group as there is a significant interest in having software that = can be more automated from an IT management perspective. Would love to have everything available right now, but it's a progressive d= evelopment effort. [< TagVault} I think one of their main main arguments for SWID -vs- CPE is that CPE's Mi= crosoft namespace has errors? That's not a fault in CPE design, it's a faul= t for Micorosft, a SWID member, that has been relying on third parties to m= aintain their CPE namespace. [TagVault >] There are a number of well-known issues with CPE's. It's not just the Micr= osoft namespace, it's most of the namespaces that have errors. This also i= sn't just a CPE issue, it's generally an issue of any system that attempts = to use an archeological approach to software identification - all of these = systems can get close, but they are almost never perfect. They are also no= t scalable. Having said all that - if you want to keep using CPE's - great= - do so, the SWID tag data will provide vendor supplied data values that c= an be used to construct normalized CPE names. Other than TagVault.org help= ing to ensure the revision of the standard allows for the data needed to cr= eate CPE's - there's no TagVault.org involvement. =20 [< TagVault} Again, NIST SCAP should not use SWID. IETF SACM should not use SWID.=20 NIST SCAP may be going down this wrong path, but I hope IETF doesn't follow= them. Why give control over such critical metadata to a corporate trade group int= erested in making money and making barriers to access? Corporate-run indust= ry trade groups that use standards bodies like ISO for legitimacy are not t= he kind of people that should be controlling key metadata for all computer = security! [TagVault >] I take serious issue with the above statement for any number of reasons, bu= t will limit my reply. ISO is an international SDO, so is IETF - they both= have their respective focus areas and a variety of strengths and weaknesse= s. I would say that neither is perfect, nor would most any rational person= try to say they were. I personally don't care too much about the standard= s body I work with - what I personally am interested in is being able to fi= x what, so far, has been a large and growing problem for IT - and that is t= he standardized provision of software identification information. I don't = particularly care which SDO is managing the overall standards development p= rocess, as long as there are clear rules to follow and I know where my work= fits into the overall process. Further, the meta data that you're referri= ng to is managed by the publishers of the software - who have a very signif= icant vested interest in ensuring their software is easy to manage and that= it can be validated as being secure. I would be more than happy to provid= e details on how the process works, so you can see there is no requirement = for companies to be a member of TagVault.org, nor is there a requirement fo= r someone to buy the standard. The key part of the SWID standard is the de= finition of the data provided and the structure of how it's provided. Beyo= nd that, it's between the publisher and the consumer to define expectations= . =20 I hope this provides some additional insights to those who cared to read to= the end. =20 There seem to be two approaches that are being promoted here: CPE=20 - Only available in a central repository - Curated by 3rd party individuals (who don't seem to manage CPE names as= a full time job, but as an added extra) - No strict approach towards normalization applied - Definition happens well after the software is released - No direct link that can be used to associate the CPE with software inve= ntory - No CPE's defined for patches - No direct link between a CPE and where someone can automatically downlo= ad patches - No ability to use inventory data to know if patches are installed or n= ot. - No commercial value for software publishers to define a CPE name for ea= ch release - No ability to use signatures in the CPE to validate publisher, or other= app data - No ability to get to file level details for application data (note, thi= s is not even close to being in scope for CPE's so really not fair) SWID tags - No repository required - publishers provide SWID tag data with their so= ftware making this unbelievably scalable - Defined by publisher and consistently applied by publisher - Normalization applied to many values - more possible, but need market s= upport - Definition happens as part of the software release process - Direct link between meta data and software inventory - Full support for patches - Direct link (in revision) between SWID tag and the publisher location w= here patches can be downloaded - Direct link between inventory data and patch installation checks - Lots of value for publishers (both commercial and FOSS) to provide SWID= tag data as it benefits many IT processes - Digital signatures of data required (plenty more to define here such as= how CA's are used, what algorithms are used, etc, but SWID tags can be sig= ned by the publisher today - further refinement of requirements can be appl= ied to best practices) - File level data provided when publishers include the file payload infor= mation (based on customer demand). Will let others on this list make the call. Cheers, SK [< TagVault} Thanks, Lee On 2/10/14 11:57 AM, Waltermire, David A. wrote: > Blibbet, > > I don't think we can simply ignore SWIDs. In my personal opinion, SWIDs h= ave many advantages over CPEs including: > > - Providing authoritative, high-fidelity software data generated at build= time by the software creator/publisher. CPEs are commonly generated by 3rd= parties in a labor intensive way by scraping vendor websites and vulnerabi= lity bulletins for software data that is often incomplete and inaccurate. > - Providing more robust software metadata that goes beyond the 11 fields = supported by CPE including tags/identification for patches which CPE doesn'= t support. > - Normalizing the data representation for installed software on endpoints= regardless of platform/software specific technologies. > - Providing software footprint details including composite files, version= s, and hashes. This is not something that CPE supports. > > Simply put, SWIDs provide greater support for the management of software = across the deployment lifecycle than CPE allows for. This has both security= and IT operational benefits. SWIDs allow for greater coverage and address = the scalability concerns that currently exist with CPE. > > With SWID there is not a requirement to pay or join any trade group to pa= rticipate. Software publishers are responsible for the creation and propaga= tion of SWID tags they produce. There is not a requirement to centrally cur= ate them like there is with the US Government curated CPE dictionary. > > The ISO specification is behind a paywall, which is the ISO model for pub= lication. The IETF and ISO both reference each other's specifications. This= should not be a significant barrier. > > The schema is freely available. You can access it here: > > http://standards.iso.org/iso/19770/-2/2009/schema.xsd > > TagVault is developing best practice guides and certification requirement= s to help interested software publishers to demonstrate the degree of infor= mation provided by a publisher's SWID tags to support various use cases. Th= ey have stated publically that they intend to make these documents publical= ly available as they are produced. Participation in TagVault is not a requi= rement for SWID tag publication; it is simply a value added service for pub= lishers and consumers if they choose to participate. > > I know of no US$500/year cost for use of CPE. Current CPE information is = provided for use on a voluntary basis at no cost to the consumer at: > > http://nvd.nist.gov/cpe.cfm > > I hope this helps address your questions/concerns. > > Sincerely, > Dave > >> -----Original Message----- >> From: Blibbet [mailto:blibbet@gmail.com] >> Sent: Wednesday, February 05, 2014 5:13 PM >> To: Waltermire, David A. >> Cc: mile@ietf.org >> Subject: Re: [mile] CPE and SWID >> >> > Please let me know if you have any questions. >> >> Will this long-term mapping between SWID and CPE mean that we can=20 >> ignore SWID and just use CPE? >> >> Will I have to pay and/or join the SWID trade group to access this=20 >> information? MITRE and NIST were goot at SCAP standards, making their=20 >> data and schemas available without the extra licenses and=20 >> registration barriers and fees. Do you have to pay ISO for access to=20 >> their SWID standards? The last time a TagVault evangelist came on=20 >> this list to push SWID, they failed to make any case for noncommercial u= se of SWID. >> http://www.ietf.org/mail-archive/web/sacm/current/msg00679.html >> >> SWID adds barriers, that'll make it difficult to create open source=20 >> software, especially Free Software, that uses SCAP/SACM. >> >> Does it still cost US$500/year for an individual to use CPE. The only=20 >> "Open Source" Microsoft mentions when they defend SWID is an internal=20 >> project (WIX), where they fund all the fees for it. >> >> This sounds bad. SCAP/SACM should not use CPE. >> > > From tony@yaanatech.com Wed Feb 12 15:06:13 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 586C21A001F for ; Wed, 12 Feb 2014 15:06:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.449 X-Spam-Level: X-Spam-Status: No, score=-2.449 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.548, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tJ7KGR5419wt for ; Wed, 12 Feb 2014 15:06:11 -0800 (PST) Received: from extmail1.yaanatech.com (extmail1.yaanatech.com [63.128.177.51]) by ietfa.amsl.com (Postfix) with SMTP id A157A1A0026 for ; Wed, 12 Feb 2014 15:06:11 -0800 (PST) Received: from [192.168.1.2] (pool-71-171-106-160.clppva.fios.verizon.net [71.171.106.160]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by extmail1.yaanatech.com (Postfix) with ESMTP id 0BF3E5808B; Wed, 12 Feb 2014 23:08:25 +0000 (UTC) Message-ID: <52FBFE60.3080101@yaanatech.com> Date: Wed, 12 Feb 2014 18:06:08 -0500 From: Tony Rutkowski Organization: Yaana Technologies User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: "Waltermire, David A." , Blibbet References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> <52F2B782.2080104@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Cc: "mile@ietf.org" Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: tony@yaanatech.com List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Feb 2014 23:06:13 -0000 It costs CHF 196.00 to even look at the the 19770-2:2009 specification of SWIDs. That's $217.66 cents at today's exchange rate. Of course, that's just the starting price, as it likely makes reference to other ISO specs for which there are additional costs. Out of curiosity, if use of the spec was of some importance to USG parties, why wasn't ISO forced to make it publicly available like the Common Criteria specs? What other IT/telecom identifier spec these days has a several hundred dollar pricetag to view it? --tony On 2/10/2014 2:57 PM, Waltermire, David A. wrote: > The ISO specification is behind a paywall, which is the ISO model for p= ublication. The IETF and ISO both reference each other's specifications. = This should not be a significant barrier. > From nobody Thu Feb 13 09:48:27 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FEC71A038F for ; Thu, 13 Feb 2014 09:48:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.061 X-Spam-Level: X-Spam-Status: No, score=0.061 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RP_MATCHES_RCVD=-0.548] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m1lzBWoPbY17 for ; Thu, 13 Feb 2014 09:48:23 -0800 (PST) Received: from skyblue2.nc.u-tokyo.ac.jp (skyblue2.nc.u-tokyo.ac.jp [133.11.124.21]) by ietfa.amsl.com (Postfix) with ESMTP id 2A6221A038B for ; Thu, 13 Feb 2014 09:48:23 -0800 (PST) Received: from [IPv6:2001:200:180:299:8906:3193:9ff3:47fa] (unknown [IPv6:2001:200:180:299:8906:3193:9ff3:47fa]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by skyblue2.nc.u-tokyo.ac.jp (Postfix) with ESMTPSA id 1A0F2B69CF34 for ; Fri, 14 Feb 2014 02:48:21 +0900 (JST) Message-ID: <52FD0569.6050800@nc.u-tokyo.ac.jp> Date: Fri, 14 Feb 2014 02:48:25 +0900 From: Daisuke MIYAMOTO User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: mile@ietf.org References: <20140213001414.5723.44927.idtracker@ietfa.amsl.com> In-Reply-To: <20140213001414.5723.44927.idtracker@ietfa.amsl.com> X-Forwarded-Message-Id: <20140213001414.5723.44927.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/mile/M2tCF7CV4fTJ5KKeDh6O29exu5Y Subject: [mile] Fwd: New Version Notification for draft-daisuke-iodef-experiment-00.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Feb 2014 17:48:25 -0000 Hello all, this is Daisuke. Here informs our draft, obtained knowledges from experimental implementation and operation of an IODEF-capable incident response management systems in my university CERT. http://tools.ietf.org/html/draft-daisuke-iodef-experiment-00 Generated codes (by some code generators) are also available at https://github.com/daisu-mi/IODEF-codegen I'd like to share about it on next IETF meeting. Regards, Daisuke -------- Original Message -------- Subject: New Version Notification for draft-daisuke-iodef-experiment-00.txt Date: Wed, 12 Feb 2014 16:14:14 -0800 From: internet-drafts@ietf.org To: Daisuke Miyamoto , Takeshi Takahashi , "daisu-mi@nc.u-tokyo.ac.jp" , "Takeshi Takahashi" A new version of I-D, draft-daisuke-iodef-experiment-00.txt has been successfully submitted by Daisuke Miyamoto and posted to the IETF repository. Name: draft-daisuke-iodef-experiment Revision: 00 Title: Knowledge obtained from the implementation experience of an IODEF- capable incident response management system Document date: 2014-02-12 Group: Individual Submission Pages: 7 URL: http://www.ietf.org/internet-drafts/draft-daisuke-iodef-experiment-00.txt Status: https://datatracker.ietf.org/doc/draft-daisuke-iodef-experiment/ Htmlized: http://tools.ietf.org/html/draft-daisuke-iodef-experiment-00 Abstract: This document explains our observation on the usability of IODEF [RFC5070], based on our experiments. We aim at developing an IODEF- capable incident response management systems in order to facilitate incident response activities. We started to design and implement the system for our university CERT, however, there are several technical issues while implementing and operating the system. This document shares the observation from our proto-type implementation and provides new sight from operational aspects. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Thu Feb 13 15:16:02 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDF0C1A04C9 for ; Thu, 13 Feb 2014 15:16:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.4 X-Spam-Level: X-Spam-Status: No, score=-1.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, J_CHICKENPOX_14=0.6, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dJc2K7dLPONu for ; Thu, 13 Feb 2014 15:15:59 -0800 (PST) Received: from mail-pb0-x22d.google.com (mail-pb0-x22d.google.com [IPv6:2607:f8b0:400e:c01::22d]) by ietfa.amsl.com (Postfix) with ESMTP id 418291A0019 for ; Thu, 13 Feb 2014 15:15:59 -0800 (PST) Received: by mail-pb0-f45.google.com with SMTP id un15so11505954pbc.32 for ; Thu, 13 Feb 2014 15:15:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=lTUdjjo5M//HWdR/qshQci6NeFquNrXdgC3zRMOYQjY=; b=ndabRpWrVQN5Yi/Fqe06cKXkbyKNkhib0E6nnl3ZLePoeCjdzEqN315iS//dUONEOU RF/lA4eZ8WNVsIu/Aq42Kb6KhbqEIYQwV+iLby1TTtJJvrsTe3zWH/lfEaB6qIXOL38s 6RJTf/a+NIBFdDRGubC9JmrfZEjpTIGlH7nUStsB+vDudZTvlx4bfEQ81HzEt2SJGUMM xEKVSpXg2j2yCIKrG6rvv+ev/dZRhaogq5CKU9LbSenXCorakWeiQioEzdx6GlRKt/Nm fyRPz+sype1kGOOHFvu9hJfdTsBLBrdm9trRvB9tDaW8aw8rtxorBF+DMpL2ruF36QDu ANCw== X-Received: by 10.67.2.106 with SMTP id bn10mr4917770pad.38.1392333358061; Thu, 13 Feb 2014 15:15:58 -0800 (PST) Received: from box.local ([184.11.139.26]) by mx.google.com with ESMTPSA id bz4sm10396667pbb.12.2014.02.13.15.15.57 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 13 Feb 2014 15:15:57 -0800 (PST) Message-ID: <52FD535F.6040903@gmail.com> Date: Thu, 13 Feb 2014 15:21:03 -0800 From: Blibbet User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:16.0) Gecko/20121005 Thunderbird/16.0 MIME-Version: 1.0 To: "mile@ietf.org" References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> <52F2B782.2080104@gmail.com> <52FBC492.8040700@gmail.com> <15a3cb413f16438f9105f637452cd840@BN1PR04MB060.namprd04.prod.outlook.com> In-Reply-To: <15a3cb413f16438f9105f637452cd840@BN1PR04MB060.namprd04.prod.outlook.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/mile/CAaK7NAe9U1pScN8N9qbPZoYaqc Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Feb 2014 23:16:01 -0000 Steve, In answer to your question, I don't represent any organization. I represent the use case of a open source project, specifically the more stringent case of a Free Software-licensed project, which usually consists of 2-5 people with zero budget. Big companies will have no problems with the barriers your organizion imposes (and I'm happy for all those non-profit income you earn from them!). But, as you admit, SWID is not usable for open source project use. And I do have an issue if SCAP or IETF SACM or related IETF standards use your stuff, as it currently exists. Tony, Speaking of parallel universes, there's also the Linux Foundation-based standard SPDX, which also tracks computer metadata, and might compete with CPE and SWID. Microsoft-based TagVault will likely have zero interest in a Linux Foundation-based standard, of course. ;-) I'd much rather see CPE mapped to SPDX, not SWID. IETF/NIST: So, as Steve of TagVault admits in his last msg, it is not viable for open source-based proejcts. In previous msgs, I didn't even bring up the lack of transparency in the corporations that control this industry group. I can't find out that data, they try hard to keep that data from the public. I seem to recall it was started by Microsoft and the Business Software Alliance (BSA, the piracy lawyer trade group), but can't confirm this. There's also the issue of what patents and related legal barriers that the SWID tech has, I see nothing that makes it ready for IETF-based usage. If IETF-based standards are happy to write-off open source implemenations, and NIST is happy to do likewise with SCAP, then you should adopt SWID today. If you want SWID to be usable by open source projects, we need to wait for TagVault v.next. Fewer legal barriers, zero price barriers for open source projects. Complete transparency about the controlling corporations and intellectual property they're controlling. And a reference implementation of SWID-based open soruce project that is not hosted/funded by MSFT, that is capable of being added to the package/port list of an FSF.org-approved Linux distro, Debian at the least. Until then, any IETF or NIST SCAP standards should completely ignore SWID. Just like they ignore ICASI SWRF and other vendor-controlled non-standards that pretend to be ones. In the mean time, you can keep using CPE, and ignore SWID. TagVault will write a batch file -- not a shell script, I'm fairly sure -- to do the mappings themselves, if they want to keep being important in this space. I look forward to the day that SWID is usable by Free Software. Thanks, Lee From nobody Thu Feb 13 21:01:06 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 118F61A00E2; Thu, 13 Feb 2014 21:01:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.098 X-Spam-Level: ** X-Spam-Status: No, score=2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FRT_STOCK2=3.988, T_FRT_STOCK2=0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7QcaJT8d7Tea; Thu, 13 Feb 2014 21:01:01 -0800 (PST) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C14F41A00D4; Thu, 13 Feb 2014 21:01:01 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 5.0.0.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20140214050101.18940.64713.idtracker@ietfa.amsl.com> Date: Thu, 13 Feb 2014 21:01:01 -0800 Archived-At: http://mailarchive.ietf.org/arch/msg/mile/TUxE80laCdxVvmkHmTleWZQQBsU Cc: mile@ietf.org Subject: [mile] I-D Action: draft-ietf-mile-rfc5070-bis-06.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Feb 2014 05:01:03 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Managed Incident Lightweight Exchange Working Group of the IETF. Title : The Incident Object Description Exchange Format v2 Authors : Roman Danyliw Paul Stoecker Filename : draft-ietf-mile-rfc5070-bis-06.txt Pages : 131 Date : 2014-02-13 Abstract: The Incident Object Description Exchange Format (IODEF) defines a data representation that provides a framework for sharing information commonly exchanged by Computer Security Incident Response Teams (CSIRTs) about computer security incidents. This document describes the information model for the IODEF and provides an associated data model specified with XML Schema. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-mile-rfc5070-bis/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-mile-rfc5070-bis-06 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-mile-rfc5070-bis-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Feb 13 21:04:54 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFE501A00E2 for ; Thu, 13 Feb 2014 21:04:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.303 X-Spam-Level: X-Spam-Status: No, score=-0.303 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FRT_STOCK2=3.988, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_FRT_STOCK2=0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1oxuDeov2X-5 for ; Thu, 13 Feb 2014 21:04:50 -0800 (PST) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) by ietfa.amsl.com (Postfix) with ESMTP id 01B191A00CF for ; Thu, 13 Feb 2014 21:04:49 -0800 (PST) Received: from timber.sei.cmu.edu (timber.sei.cmu.edu [10.64.21.23]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1E54m3O021031 for ; Fri, 14 Feb 2014 00:04:48 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1392354288; bh=/n4CzMDMbDz/YyN10WOGNEihJMFnLKdtbrf9avyF6P0=; h=From:To:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:Content-Transfer-Encoding:MIME-Version:Sender: Reply-To:Cc; b=Qaisw/+/nRWLUiCi2TTVzniI1A8k68pHTbfsBLUXJhyWoxepg6Fmngwxps4Xk0xFc GoaOgd5FsLy/ccLdHvtb0PwHCut1J0pEKV03PLQUcAN8TvpqgxR55sc/66Ih/QPpn9 gXhV96w8yCvdzWoAILOqf+zykvKPZ4LgnPeDLsF0= Received: from CASSINA.ad.sei.cmu.edu (cassina.sei.cmu.edu [10.64.28.249]) by timber.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1E54mVx028411 for ; Fri, 14 Feb 2014 00:04:48 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.02.0347.000; Fri, 14 Feb 2014 00:04:48 -0500 From: "Roman D. Danyliw" To: "mile@ietf.org" Thread-Topic: [mile] I-D Action: draft-ietf-mile-rfc5070-bis-06.txt Thread-Index: AQHPKUHF91PRSdBAl0aOdlLFyAAF9Jq0Mdkg Date: Fri, 14 Feb 2014 05:04:46 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC54C3F661@marathon> References: <20140214050101.18940.64713.idtracker@ietfa.amsl.com> In-Reply-To: <20140214050101.18940.64713.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/mile/9Qv4ikw4GwoavP9SkMMAXD4JPC0 Subject: [mile] FW: I-D Action: draft-ietf-mile-rfc5070-bis-06.txt X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Feb 2014 05:04:52 -0000 The changelog for -06 is as follows: ** (schema) Sorted attributes of System to align to the text ** (schema) Removed System@indicator-set-id ** (schema) Removed Service/{Email,EmailSubject, X-Mailer} in favor of Serv= ice/EmailData ** (schema) Renamed Service/EmailInfo to EmailData ** (schema) Renamed Service@ip_protocol to @ip-protocol ** (schema) Removed Node/{NodeName,DateTime} and Service/DomainData in favo= r of Node/DomainData (Issue #4) ** (schema) Added Expectation@action=3D{upgrade-software,rebuild-asset} ** (schema) Added Contact@role=3D"vendor" ** (schema) Added {Incident,Event}/Discovery and Discovery/DetectionPattern= (Issue #27) ** (editorial) Added Section 4.4 to describe incompatable changes between r= fc5070 and rfc070bis ** (editorial) Changed text in Method class to address part (c) for Issue #= 22 (Issue #22) Roman -----Original Message----- From: mile [mailto:mile-bounces@ietf.org] On Behalf Of internet-drafts@ietf= .org Sent: Friday, February 14, 2014 12:01 AM To: i-d-announce@ietf.org Cc: mile@ietf.org Subject: [mile] I-D Action: draft-ietf-mile-rfc5070-bis-06.txt A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Managed Incident Lightweight Exchange Wor= king Group of the IETF. Title : The Incident Object Description Exchange Format v= 2 Authors : Roman Danyliw Paul Stoecker Filename : draft-ietf-mile-rfc5070-bis-06.txt Pages : 131 Date : 2014-02-13 Abstract: The Incident Object Description Exchange Format (IODEF) defines a data representation that provides a framework for sharing information commonly exchanged by Computer Security Incident Response Teams (CSIRTs) about computer security incidents. This document describes the information model for the IODEF and provides an associated data model specified with XML Schema. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-mile-rfc5070-bis/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-mile-rfc5070-bis-06 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-mile-rfc5070-bis-06 Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ mile mailing list mile@ietf.org https://www.ietf.org/mailman/listinfo/mile From nobody Fri Feb 14 10:23:11 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A3821A03C8 for ; Fri, 14 Feb 2014 10:23:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.748 X-Spam-Level: X-Spam-Status: No, score=-4.748 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.548] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FisC-k_LombR for ; Fri, 14 Feb 2014 10:23:07 -0800 (PST) Received: from smtp.ee.ethz.ch (smtp.ee.ethz.ch [129.132.2.219]) by ietfa.amsl.com (Postfix) with ESMTP id D5DD71A03BD for ; Fri, 14 Feb 2014 10:23:06 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by smtp.ee.ethz.ch (Postfix) with ESMTP id 2D0F6D9308 for ; Fri, 14 Feb 2014 19:23:04 +0100 (MET) X-Virus-Scanned: by amavisd-new on smtp.ee.ethz.ch Received: from smtp.ee.ethz.ch ([127.0.0.1]) by localhost (.ee.ethz.ch [127.0.0.1]) (amavisd-new, port 10024) with LMTP id uBKct27xua1l for ; Fri, 14 Feb 2014 19:23:03 +0100 (MET) Received: from [10.0.27.100] (cust-integra-122-165.antanet.ch [80.75.122.165]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: briant) by smtp.ee.ethz.ch (Postfix) with ESMTPSA id 9E91BD9305 for ; Fri, 14 Feb 2014 19:23:03 +0100 (MET) From: Brian Trammell Content-Type: multipart/signed; boundary="Apple-Mail=_D8F18AC4-5B1F-45CD-899D-2936FF75D984"; protocol="application/pgp-signature"; micalg=pgp-sha512 Date: Fri, 14 Feb 2014 19:23:02 +0100 Message-Id: <9DB41356-7EC6-4267-8DA9-0B5F30853E88@tik.ee.ethz.ch> To: MILE IETF Mime-Version: 1.0 (Mac OS X Mail 7.1 \(1827\)) X-Mailer: Apple Mail (2.1827) Archived-At: http://mailarchive.ietf.org/arch/msg/mile/Xv57Np1QFX-aSLelGVmLzDFdkXc Subject: [mile] Draft agenda for MILE, IETF 89, Friday 7 March 2014 X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: mile-chairs@tools.ietf.org List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Feb 2014 18:23:09 -0000 --Apple-Mail=_D8F18AC4-5B1F-45CD-899D-2936FF75D984 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Greetings, all, The draft agenda for MILE has been posted at = http://www.ietf.org/proceedings/89/agenda/agenda-89-mile, and is copied = below. Please send any comments or questions to = mile-chairs@tools.ietf.org. Best regards, Brian MILE Agenda - IETF 89 London Remote participation is available via meetecho; see http://ietf89.conf.meetecho.com =20 Please note the meeting takes place in UTC. Friday 7 March, 11:50 - 13:20, Buckingham =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D I. Welcome and Administrivia ------ --------------------------------------------------------------- 11:50 Welcome, Status, and Agenda Bash 10m Chairs (K. Moriarty, B. Trammell) II. Current Working Group Drafts ------ --------------------------------------------------------------- 12:00 draft-ietf-mile-rfc5070-bis 20m R. Danyliw III. Other Presentations ------ --------------------------------------------------------------- 12:20 draft-murillo-mile-cps-00 15m TBD for M. Murillo 12:35 draft-miyamoto-iodef-experiment 15m D. Miyamoto 12:50 draft-moriarty-mile-implementreport 5m K. Moriarty 12:55 draft-schaad-mile-iodef-plasma 15m T. Freeman 13:10 MILE + JOSE 10m T. Freeman --Apple-Mail=_D8F18AC4-5B1F-45CD-899D-2936FF75D984 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJS/l8GAAoJENt3nsOmbNJcVkwIAKdEW1MYdOoPc3oKrWXlyVDz crR3AbeRGmoTewUM5U8j10JRCGa/q/+nDecmW+ucRIpBCbqM1aY3+DmzXJ/pPv/2 RgiigugV014EKZC6xuuqNfsghqzS1qqqruwk0okjkWFrpvDX2nTdDOfMOBf96QJ3 hOzTDRNNyR+MTp5NmoxXZwhNdl4ofNYtPOsOKxeRFVCjMHAPXQPjOnu6sIdAQvzz 4kxhXSD5KaFJVDvjTvggiivJ5npzbmU+RXxvV59Y9ziD7XGHQ5LxtzIYJb3UZM8B Lk7a1rv16MYUX03hVKSVS12W4MQ98zqi1jPNlH7l9A0V7Uqw4VVRX1+2dv4tJsU= =U6B9 -----END PGP SIGNATURE----- --Apple-Mail=_D8F18AC4-5B1F-45CD-899D-2936FF75D984-- From nobody Tue Feb 18 18:23:21 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D60B31A031B for ; Tue, 18 Feb 2014 18:23:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pAgqnlf_JdA5 for ; Tue, 18 Feb 2014 18:23:15 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2lp0208.outbound.protection.outlook.com [207.46.163.208]) by ietfa.amsl.com (Postfix) with ESMTP id 723451A041B for ; Tue, 18 Feb 2014 18:23:15 -0800 (PST) Received: from BLUPR09MB038.namprd09.prod.outlook.com (10.255.211.144) by BLUPR09MB038.namprd09.prod.outlook.com (10.255.211.144) with Microsoft SMTP Server (TLS) id 15.0.878.16; Wed, 19 Feb 2014 02:23:04 +0000 Received: from BLUPR09MB038.namprd09.prod.outlook.com ([169.254.11.27]) by BLUPR09MB038.namprd09.prod.outlook.com ([169.254.11.27]) with mapi id 15.00.0878.008; Wed, 19 Feb 2014 02:23:04 +0000 From: "Waltermire, David A." To: "tony@yaanatech.com" , "mile@ietf.org" Thread-Topic: [mile] CPE and SWID Thread-Index: Ac8iuuT2GnSM5l/DSiW4GVRSwDSDnAABJZYAAPMpVfAAZhuXAAAD7fqAATh4s4A= Date: Wed, 19 Feb 2014 02:23:03 +0000 Message-ID: References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> <52F2B782.2080104@gmail.com> <52FBC492.8040700@gmail.com> <52FBDEF1.2060004@yaanatech.com> In-Reply-To: <52FBDEF1.2060004@yaanatech.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [129.6.227.199] x-forefront-prvs: 012792EC17 x-forefront-antispam-report: SFV:NSPM; SFS:(10009001)(6009001)(51704005)(13464003)(377454003)(189002)(199002)(76482001)(69226001)(74316001)(81686001)(81342001)(95416001)(87936001)(56816005)(2656002)(87266001)(74706001)(83072002)(81816001)(74366001)(46102001)(54316002)(80022001)(54356001)(74502001)(65816001)(77096001)(93516002)(90146001)(76786001)(81542001)(95666001)(86362001)(66066001)(85306002)(63696002)(77982001)(51856001)(19580395003)(94946001)(33646001)(4396001)(53806001)(92566001)(50986001)(94316002)(47976001)(85852003)(76576001)(56776001)(47446002)(59766001)(74876001)(76796001)(19580405001)(74662001)(49866001)(31966008)(83322001)(80976001)(47736001)(93136001)(79102001)(24736002); DIR:OUT; SFP:1101; SCL:1; SRVR:BLUPR09MB038; H:BLUPR09MB038.namprd09.prod.outlook.com; CLIP:129.6.227.199; FPR:ECE9F2EE.AEEA5795.31D17EBB.86E5C9C1.20464; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov Archived-At: http://mailarchive.ietf.org/arch/msg/mile/F_WwflL8YWYh2Wp26p8eKc2NHAo Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Feb 2014 02:23:18 -0000 Going back to the start of this thread, what was proposed was to incorporat= e ISO/IEC 19770-2 SWIDs as ONE method of identifying software in the Applic= ation and OperatingSystem classes "using the SCI-defined class Platform". I= agree that we will never see 100% convergence on a single software identif= ication approach across all use cases and communities of interest. But effo= rts like SWID tagging and CPE do offer a degree of commonality across speci= fic communities of interest and use cases. This should not be discounted he= re. It seems to me that SWID tags should be included in this work, along wi= th CPE, as a possible method to identify software in this context. There is= running code for both examples. Dave > -----Original Message----- > From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Tony Rutkowski > Sent: Wednesday, February 12, 2014 3:52 PM > To: mile@ietf.org > Subject: Re: [mile] CPE and SWID >=20 > We seem to live in a world of parallel universes and reinvention of platf= orms > every generation. >=20 > The idea for globally unique software/application IDs is compelling - as = it has > been for the past 30 years. > Since the CCITT/JTC1 meetings of the early 80s, SWIDs have been pursued b= y > different groups. Perhaps the first and most elegant SWIDs were created = in > the OSI world. They deserve cudos for being far-sighted > - even binding the SWIDs to PKI certificates, although their platform had > limited takeup in the marketplace. >=20 > As the years progressed, and the need for unique software IDs grew, > multiple organizations and groups created their own SWID schemes and > sought to assert it in the marketplace. Bob Khan's combination of DOIs a= nd > Handles is perhaps the zenith of the SWID concepts. The 19770-2 based > SWIDs are the latest folks on the SWID block. >=20 > About two years ago, the largest standards body today in the networking > sector, as well as the constituents with the most compelling need - 3GPP = - > undertook an 18 month process to consider if they should establish their = own > SWIDs. In the end, they did not pursue that course. >=20 > What they discovered was that there was a world of autonomous parties > that have adopted well known and widely established SWIDs. Especially > significant were the maintainers of the two largest application platform = OSs - > IOS and Android - which have their own widely implemented SWIDs. So in > the end, 3GPP chose embrace this diverse, autonomous SWID world. > The result was promulgated in Rel. 11 of the world's universal spec for m= obile > networks. The materials - although extensive - are difficult to find unl= ess one > is familiar with 3GPP and has access to the materials. > Some summary slides with pointers are attached. >=20 > Although 19770-2 based SWIDs are not a bad approach, it is > incomprehensible that a global standards body - especially the IETF - wou= ld > embrace them as the only solution to a complex need where there are > already so many equally compelling solutions. The work of 3GPP here is > worth emulating. >=20 > --tony >=20 >=20 From nobody Wed Feb 19 16:13:26 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BCC71A0538 for ; Wed, 19 Feb 2014 16:13:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r5Qs3MACPpq6 for ; Wed, 19 Feb 2014 16:13:23 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2lp0238.outbound.protection.outlook.com [207.46.163.238]) by ietfa.amsl.com (Postfix) with ESMTP id 74E2E1A054D for ; Wed, 19 Feb 2014 16:13:23 -0800 (PST) Received: from BN1PR04MB060.namprd04.prod.outlook.com (10.255.203.28) by BN1PR04MB058.namprd04.prod.outlook.com (10.255.203.16) with Microsoft SMTP Server (TLS) id 15.0.868.8; Thu, 20 Feb 2014 00:13:18 +0000 Received: from BN1PR04MB060.namprd04.prod.outlook.com ([169.254.14.121]) by BN1PR04MB060.namprd04.prod.outlook.com ([169.254.14.186]) with mapi id 15.00.0868.013; Thu, 20 Feb 2014 00:13:17 +0000 From: Steve Klos To: "mile@ietf.org" Thread-Topic: Re: [mile] CPE and SWID Thread-Index: AQHPLdCNpbKyJr2Or0iEF6aONAijyw== Date: Thu, 20 Feb 2014 00:13:17 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [2600:1010:b10b:5d40:c400:799d:2897:4378] x-forefront-prvs: 01283822F8 x-forefront-antispam-report: SFV:NSPM; SFS:(10019001)(6009001)(199002)(189002)(59766001)(93516002)(74662001)(47446002)(76482001)(81816001)(92726001)(54316002)(16236675002)(77982001)(81686001)(65816001)(76796001)(63696002)(74876001)(74502001)(83072002)(79102001)(80022001)(92566001)(46102001)(31966008)(86362001)(93136001)(33646001)(94316002)(94946001)(51856001)(4396001)(95416001)(50986001)(74706001)(54356001)(53806001)(85306002)(83322001)(63666003)(558084003)(2656002)(80976001)(87936001)(90146001)(74366001)(95666001)(56776001)(81342001)(76176001)(85852003)(47736001)(49866001)(81542001)(87266001)(76786001)(69226001)(47976001)(56816005)(77096001)(3826001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB058; H:BN1PR04MB060.namprd04.prod.outlook.com; CLIP:2600:1010:b10b:5d40:c400:799d:2897:4378; FPR:19F1724F.2530D401.40503D84.D4726DF9.200C9; InfoNoRecordsA:1; MX:1; LANG:en; Content-Type: multipart/alternative; boundary="_000_gd7qpvii19acieqxknlcp52c1392854444639emailandroidcom_" MIME-Version: 1.0 X-OriginatorOrg: tagvault.org Archived-At: http://mailarchive.ietf.org/arch/msg/mile/KrHLVxX-inx81-yicdxM28XvXd0 Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Feb 2014 00:13:25 -0000 --_000_gd7qpvii19acieqxknlcp52c1392854444639emailandroidcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGF2ZSwNCg0KVmVyeSBnb29kIHBvaW50IGFuZCwgaG9uZXN0bHksIG9uZSB0aGF0IEkgaGFkIGxv c3Qgc2lnaHQgb2YgYXMgd2VsbC4gIEkgZG8gYWRtaXQgdG8gaGF2aW5nIGJsaW5kZXJzIG9uIGZy b20gdGltZSB0byB0aW1lIGJlY2F1c2Ugb2YgdGhlIGZvY3VzIG9mIG15IHJvbGUgaW4gdGhpcyBz cGFjZSBhbmQgSSB0aGFuayB5b3UgZm9yIHRoZSByZW1pbmRlci4NCg0KQ2hlZXJzLA0KDQpTSw0K NDA4LjIwMi4xOTAwDQpTZW50IGZyb20gYSBtb2JpbGUgZGV2aWNlIC0NCnBsZWFzZSBmb3JnaXZl IGJyZXZpdHkgYW5kL29yIHR5cG9zDQo= --_000_gd7qpvii19acieqxknlcp52c1392854444639emailandroidcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5Pg0KPGRpdj5EYXZlLDwv ZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+VmVyeSBnb29kIHBvaW50IGFuZCwgaG9uZXN0 bHksIG9uZSB0aGF0IEkgaGFkIGxvc3Qgc2lnaHQgb2YgYXMgd2VsbC4gJm5ic3A7SSBkbyBhZG1p dCB0byBoYXZpbmcgYmxpbmRlcnMgb24gZnJvbSB0aW1lIHRvIHRpbWUgYmVjYXVzZSBvZiB0aGUg Zm9jdXMgb2YgbXkgcm9sZSBpbiB0aGlzIHNwYWNlIGFuZCBJIHRoYW5rIHlvdSBmb3IgdGhlIHJl bWluZGVyLjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCkNoZWVycywNCjxkaXY+PGJyPg0KPC9k aXY+DQo8ZGl2PlNLPC9kaXY+DQo8ZGl2PjQwOC4yMDIuMTkwMDwvZGl2Pg0KPGRpdj5TZW50IGZy b20gYSBtb2JpbGUgZGV2aWNlIC08L2Rpdj4NCjxkaXY+cGxlYXNlIGZvcmdpdmUgYnJldml0eSBh bmQvb3IgdHlwb3M8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_gd7qpvii19acieqxknlcp52c1392854444639emailandroidcom_-- From nobody Fri Feb 21 15:04:51 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79D511A0273 for ; Fri, 21 Feb 2014 15:04:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.602 X-Spam-Level: X-Spam-Status: No, score=-2.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9__5UIOcj3Ng for ; Fri, 21 Feb 2014 15:04:47 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1lp0149.outbound.protection.outlook.com [207.46.163.149]) by ietfa.amsl.com (Postfix) with ESMTP id D93A31A0105 for ; Fri, 21 Feb 2014 15:04:46 -0800 (PST) Received: from BN1PR04MB060.namprd04.prod.outlook.com (10.255.203.28) by BN1PR04MB059.namprd04.prod.outlook.com (10.255.203.19) with Microsoft SMTP Server (TLS) id 15.0.868.8; Fri, 21 Feb 2014 23:04:41 +0000 Received: from BN1PR04MB060.namprd04.prod.outlook.com ([169.254.14.121]) by BN1PR04MB060.namprd04.prod.outlook.com ([169.254.14.186]) with mapi id 15.00.0868.013; Fri, 21 Feb 2014 23:04:40 +0000 From: Steve Klos To: "mile@ietf.org" Thread-Topic: [mile] CPE and SWID Thread-Index: AQHPLa0y5HSXIvOeFk+WE4zreBDZSJrAVyoQ Date: Fri, 21 Feb 2014 23:04:40 +0000 Message-ID: <644789d5df394c23bd5f2bdff03963d5@BN1PR04MB060.namprd04.prod.outlook.com> References: <0958b539572e43eda472f6a3a8fd8382@BLUPR09MB038.namprd09.prod.outlook.com> <52F2B782.2080104@gmail.com> <52FBC492.8040700@gmail.com> <52FBDEF1.2060004@yaanatech.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [98.248.97.172] x-forefront-prvs: 01294F875B x-forefront-antispam-report: SFV:NSPM; SFS:(10019001)(6009001)(377454003)(199002)(189002)(13464003)(51704005)(83072002)(56816005)(50986001)(54316002)(74662001)(47446002)(92566001)(49866001)(47736001)(81342001)(47976001)(81542001)(4396001)(56776001)(85852003)(90146001)(74706001)(94316002)(95416001)(69226001)(33646001)(93516002)(76576001)(76796001)(86362001)(74876001)(93136001)(19580395003)(87266001)(74316001)(85306002)(80976001)(79102001)(53806001)(54356001)(31966008)(66066001)(59766001)(94946001)(77982001)(77096001)(46102001)(74502001)(76786001)(19580405001)(76482001)(81686001)(83322001)(51856001)(63696002)(65816001)(2656002)(74366001)(80022001)(81816001)(87936001)(95666003)(24736002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB059; H:BN1PR04MB060.namprd04.prod.outlook.com; CLIP:98.248.97.172; FPR:ECE8F2EE.AEEA5795.31D17EBB.86E5C9C1.2048A; InfoNoRecordsA:1; MX:1; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: tagvault.org Archived-At: http://mailarchive.ietf.org/arch/msg/mile/VWsAmb9SVwKNiylR5R2bDVAa614 Subject: Re: [mile] CPE and SWID X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Feb 2014 23:04:49 -0000 +1 -----Original Message----- From: Waltermire, David A. [mailto:david.waltermire@nist.gov]=20 Sent: Tuesday, February 18, 2014 6:23 PM To: tony@yaanatech.com; mile@ietf.org Subject: Re: [mile] CPE and SWID Going back to the start of this thread, what was proposed was to incorporat= e ISO/IEC 19770-2 SWIDs as ONE method of identifying software in the Applic= ation and OperatingSystem classes "using the SCI-defined class Platform". I= agree that we will never see 100% convergence on a single software identif= ication approach across all use cases and communities of interest. But effo= rts like SWID tagging and CPE do offer a degree of commonality across speci= fic communities of interest and use cases. This should not be discounted he= re. It seems to me that SWID tags should be included in this work, along wi= th CPE, as a possible method to identify software in this context. There is= running code for both examples. Dave > -----Original Message----- > From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Tony Rutkowski > Sent: Wednesday, February 12, 2014 3:52 PM > To: mile@ietf.org > Subject: Re: [mile] CPE and SWID >=20 > We seem to live in a world of parallel universes and reinvention of=20 > platforms every generation. >=20 > The idea for globally unique software/application IDs is compelling -=20 > as it has been for the past 30 years. > Since the CCITT/JTC1 meetings of the early 80s, SWIDs have been=20 > pursued by different groups. Perhaps the first and most elegant SWIDs=20 > were created in the OSI world. They deserve cudos for being=20 > far-sighted > - even binding the SWIDs to PKI certificates, although their platform=20 > had limited takeup in the marketplace. >=20 > As the years progressed, and the need for unique software IDs grew,=20 > multiple organizations and groups created their own SWID schemes and=20 > sought to assert it in the marketplace. Bob Khan's combination of=20 > DOIs and Handles is perhaps the zenith of the SWID concepts. The=20 > 19770-2 based SWIDs are the latest folks on the SWID block. >=20 > About two years ago, the largest standards body today in the=20 > networking sector, as well as the constituents with the most=20 > compelling need - 3GPP - undertook an 18 month process to consider if=20 > they should establish their own SWIDs. In the end, they did not pursue t= hat course. >=20 > What they discovered was that there was a world of autonomous parties=20 > that have adopted well known and widely established SWIDs. Especially=20 > significant were the maintainers of the two largest application=20 > platform OSs - IOS and Android - which have their own widely=20 > implemented SWIDs. So in the end, 3GPP chose embrace this diverse, auton= omous SWID world. > The result was promulgated in Rel. 11 of the world's universal spec=20 > for mobile networks. The materials - although extensive - are=20 > difficult to find unless one is familiar with 3GPP and has access to the = materials. > Some summary slides with pointers are attached. >=20 > Although 19770-2 based SWIDs are not a bad approach, it is=20 > incomprehensible that a global standards body - especially the IETF -=20 > would embrace them as the only solution to a complex need where there=20 > are already so many equally compelling solutions. The work of 3GPP=20 > here is worth emulating. >=20 > --tony >=20 >=20 From nobody Wed Feb 26 13:38:15 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2896D1A020C for ; Wed, 26 Feb 2014 13:38:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.401 X-Spam-Level: X-Spam-Status: No, score=-0.401 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, J_CHICKENPOX_27=0.6, J_CHICKENPOX_29=0.6, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dk2BjGuN2UmJ for ; Wed, 26 Feb 2014 13:38:00 -0800 (PST) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) by ietfa.amsl.com (Postfix) with ESMTP id 8674B1A0131 for ; Wed, 26 Feb 2014 13:38:00 -0800 (PST) Received: from timber.sei.cmu.edu (timber.sei.cmu.edu [10.64.21.23]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1QLbwgr020968 for ; Wed, 26 Feb 2014 16:37:58 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1393450678; bh=NEcl/HmRT1qC1NvcBxcgwF7Ba5AiNqDne7o/ujK07os=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=GpboEGrYQBA7UA6b7ILq66guZYwZFl7u/7EjwKokKewUlrIEyVchWvWb5C670es/n SsR7VnBrur7UHeEhRIpxFgICv3c4FY21NpQWM/RE+JX92S9N2vOOCuxDgCYqw+3wIU 0b/oPQewQkHnp2PmqQp4EvN4H8BpNgI3zKRhef4o= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by timber.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1QLbwH1019870 for ; Wed, 26 Feb 2014 16:37:58 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.02.0347.000; Wed, 26 Feb 2014 16:37:58 -0500 From: "Roman D. Danyliw" To: "mile@ietf.org" Thread-Topic: How are email and file hashes computed? Thread-Index: Ac8zOwbSCy75do86TZ2CV1Gz6W1CiA== Date: Wed, 26 Feb 2014 21:37:58 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFCA4119DD6@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/mile/_XOrLIVUhUMmKGzY6E40dJOTc84 Subject: [mile] How are email and file hashes computed? X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Feb 2014 21:38:04 -0000 Hello! Setting HashData@type=3D"email-hash" conveys that the combination of ds:Sig= nature, ds:KeyInfo, or ds:Reference classes of the same HashData will descr= ibe "[a]n email hash" of some form. Over which part of the email is this h= ash computed? We currently fail to specify this detail. The same question applies to when HashData@type=3D"file-hash". In this cas= e, I would propose we state that the "hash is computed over the entire cont= ents of the file". Roman From nobody Wed Feb 26 13:42:39 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0817A1A0713 for ; Wed, 26 Feb 2014 13:42:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.901 X-Spam-Level: X-Spam-Status: No, score=-2.901 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lG4NNzy9SYB2 for ; Wed, 26 Feb 2014 13:42:33 -0800 (PST) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) by ietfa.amsl.com (Postfix) with ESMTP id BEBE51A0711 for ; Wed, 26 Feb 2014 13:42:32 -0800 (PST) Received: from pawpaw.sei.cmu.edu (pawpaw.sei.cmu.edu [10.64.21.22]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1QLgVCQ021052 for ; Wed, 26 Feb 2014 16:42:31 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1393450951; bh=JK+pTKiy1GbfeiPnVJnUq0lYQwMg25+7RHdyHwxePvY=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=eSsxKh1TO6UV56a1fcUoS5dtkpbA2p2VYabOIPgba7o1jzRGwTHNlrSvwaywr6yPe OmOdNrzA0fn3cPrXQdUbohuJDUz4f/aJBVQs2nwdyuByj3IpVkBeVW+Tx1gcmpF68l riZLO87EIW+92mPSBqXW+k9wBAp+Vw4A3O9TWBco= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by pawpaw.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1QLgZKH022905 for ; Wed, 26 Feb 2014 16:42:36 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.02.0347.000; Wed, 26 Feb 2014 16:42:30 -0500 From: "Roman D. Danyliw" To: "mile@ietf.org" Thread-Topic: Review of Incident@purpose Thread-Index: Ac8zO3rxu6drZWLDS0uPNLadwmjUag== Date: Wed, 26 Feb 2014 21:42:30 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFCA4119E2E@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/mile/gsHlYPsrz41Kp5qnyfHf2eZyr4I Subject: [mile] Review of Incident@purpose X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Feb 2014 21:42:36 -0000 Hello! In Issue #17 (http://trac.tools.ietf.org/wg/mile/trac/ticket/17), we're tra= cking the need to review the completeness of Incident@purpose in 5070bis. = In -06, it is defined as follows: ---[ snip from Section 3.2 ]-- purpose Required. ENUM. The purpose attribute represents the reason why the IODEF document was created. It is closely related to the Expectation class (Section 3.17). This attribute is defined as an enumerated list: 1. traceback. The document was sent for trace-back purposes. 2. mitigation. The document was sent to request aid in mitigating the described activity. 3. reporting. The document was sent to comply with reporting requirements. 4. watch. The document was sent to convey indicators to watch for particular activity. 5. other. The document was sent for purposes specified in the Expectation class. 6. ext-value. An escape value used to extend this attribute. See Section 5.1. --[ end ]-- Are there additional values the working would like to include? Roman From nobody Wed Feb 26 21:47:12 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 027611A01B3 for ; Wed, 26 Feb 2014 21:47:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.702 X-Spam-Level: X-Spam-Status: No, score=-0.702 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_27=0.6, J_CHICKENPOX_29=0.6, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h5sliG2JywNS for ; Wed, 26 Feb 2014 21:47:09 -0800 (PST) Received: from trammell.ch (trammell1.nine.ch [5.148.172.66]) by ietfa.amsl.com (Postfix) with ESMTP id 5827E1A0409 for ; Wed, 26 Feb 2014 21:47:08 -0800 (PST) Received: from [10.0.27.100] (cust-integra-122-165.antanet.ch [80.75.122.165]) by trammell.ch (Postfix) with ESMTPSA id 0F96A1A0C8B; Thu, 27 Feb 2014 06:47:03 +0100 (CET) Content-Type: multipart/signed; boundary="Apple-Mail=_B4EC362C-32C9-4188-86DD-8CBDBD533FF2"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 7.1 \(1827\)) From: Brian Trammell In-Reply-To: <359EC4B99E040048A7131E0F4E113AFCA4119DD6@marathon> Date: Thu, 27 Feb 2014 06:47:02 +0100 Message-Id: <5C21CB7C-C79E-4D68-8A0D-C76E95B01355@trammell.ch> References: <359EC4B99E040048A7131E0F4E113AFCA4119DD6@marathon> To: "Roman D. Danyliw" X-Mailer: Apple Mail (2.1827) Archived-At: http://mailarchive.ietf.org/arch/msg/mile/bwEGzjVVW2vZJG7kBI33nQjiSI8 Cc: "mile@ietf.org" Subject: Re: [mile] How are email and file hashes computed? X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Feb 2014 05:47:11 -0000 --Apple-Mail=_B4EC362C-32C9-4188-86DD-8CBDBD533FF2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii hi Roman, the key question here is what's done in practice? On 26 Feb 2014, at 22:37, Roman D. Danyliw wrote: > Hello! >=20 > Setting HashData@type=3D"email-hash" conveys that the combination of = ds:Signature, ds:KeyInfo, or ds:Reference classes of the same HashData = will describe "[a]n email hash" of some form. Over which part of the = email is this hash computed? We currently fail to specify this detail. What's commonly done here? I can see a case for body-only, headers-only, = originator headers, or any combination of the three.=20 > The same question applies to when HashData@type=3D"file-hash". In = this case, I would propose we state that the "hash is computed over the = entire contents of the file". Is it ever (generally) useful to express something other than a hash = over the whole file? > Roman >=20 > _______________________________________________ > mile mailing list > mile@ietf.org > https://www.ietf.org/mailman/listinfo/mile --Apple-Mail=_B4EC362C-32C9-4188-86DD-8CBDBD533FF2 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJTDtFWAAoJENt3nsOmbNJcDGEH/0qEiHf+BEXWUvbfBK2bWKqZ NkMtltyaNEf8MMZTlL+eMjifrVwizlWaHc+ds81GQNIF3TG1tHlodtjKTU+w4oxG r336R7CjqtzXKm4pPDAGtmHPcTDRPd7ju+Q+2RXT9TMBWtWkm5OM/xbGQOsPJ5Ui 7DgOlojwTEfg3ImKh6zbgu/ZV/+VclPNK48DZ25cOgNOIPLms9Y/dSn4qL7+da+/ /9SsVpT3ugUUyF5MsBr+KI4avncvPrjGy/oVKuJ5J80c/rEjuzOkEzBp+bDOfWs+ ZkVBFG0oZE+lrhXAWJhU+46yoAJKkNcmsrq6mBTUZcj0rod63QTywkVFKqEmxes= =htFd -----END PGP SIGNATURE----- --Apple-Mail=_B4EC362C-32C9-4188-86DD-8CBDBD533FF2-- From nobody Thu Feb 27 08:16:04 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50F701A01EF for ; Thu, 27 Feb 2014 08:16:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.601 X-Spam-Level: X-Spam-Status: No, score=-1.601 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YUFLykJH58kt for ; Thu, 27 Feb 2014 08:16:01 -0800 (PST) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) by ietfa.amsl.com (Postfix) with ESMTP id D68421A0058 for ; Thu, 27 Feb 2014 08:16:00 -0800 (PST) Received: from timber.sei.cmu.edu (timber.sei.cmu.edu [10.64.21.23]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1RGFw0h006350 for ; Thu, 27 Feb 2014 11:15:58 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1393517759; bh=j7u6YK1lgBdvV1npTac8ZWgL4ABuzltK7SIqq/4vlck=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=eM6NiehCgBhnvaBkNJ3quVPMJVwGyVXBKGTFmz2iGqSNlX+u1dti/5jfPuwWtpMyz fUVw+1zBIcBQGqixIaHQOfYt3EIYciYc1NazrNAP7tg/eZWH/5fRApjYZjqGuAqjKL FLimjNnfHHOxFxbKl3mXdYVETgAeRmtKmqEoyPLc= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by timber.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s1RGFwQx011553 for ; Thu, 27 Feb 2014 11:15:58 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.02.0347.000; Thu, 27 Feb 2014 11:15:58 -0500 From: "Roman D. Danyliw" To: "mile@ietf.org" Thread-Topic: Missing data elements useful for incident reporting Thread-Index: Ac8z1NvMAZc4YZH5S4+xbydbR0teBw== Date: Thu, 27 Feb 2014 16:15:58 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFCA411C8F9@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/mile/3Ecp4stXN6vLrMw-XGBbqGLSpNk Subject: [mile] Missing data elements useful for incident reporting X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Feb 2014 16:16:03 -0000 Hello! I cross-walked a few references describing the incident reporting process (= e.g., NIST SP800-61 and CERT's Handbook for CSIRTs) and a number of operati= onal reporting forms, and found that 5070bis can't easily represent these d= ata fields: (1) Status of an Incident (e.g., New/In Progress/Ended/Resolved/Unknown; Oc= curring/Contained/Concluded/Future Threat) (2) Consortium-specific incident categories -- consortiums defined label cl= assifying this incident (3) Mitigation factors -- a free form description on mitigating factors tha= t influence the technical or business impact=20 (4) Distinguishing between the report time (e.g., time when this incident w= as reported as occurring) vs. generation time (i.e., when this IODEF-Docume= nt was created). (5) Enumerating which organizations have been notified in the incident -- n= eed to review current HistoryItem and Contact classes (6) RecoveryTime -- the wall-clock timestamp of when the impact of the inci= dent was remediated. (7) Cause of the incident (e.g., misconfigured app, unpatched host) -- the = SCI draft introduces Method/AdditionalData/Weakness and this may be suffici= ent. Does anyone feel we shouldn't add a particular data elements listed above t= o the data model? Roman From nobody Thu Feb 27 08:37:32 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3D7F1A027E for ; Thu, 27 Feb 2014 08:37:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.547 X-Spam-Level: X-Spam-Status: No, score=-2.547 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, CTYPE_001C_B=0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.547, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id elcv-VbNty46 for ; Thu, 27 Feb 2014 08:37:27 -0800 (PST) Received: from mailuogwdur.emc.com (mailuogwdur.emc.com [128.221.224.79]) by ietfa.amsl.com (Postfix) with ESMTP id 75FB51A03B7 for ; Thu, 27 Feb 2014 08:37:27 -0800 (PST) Received: from maildlpprd51.lss.emc.com (maildlpprd51.lss.emc.com [10.106.48.155]) by mailuogwprd54.lss.emc.com (Sentrion-MTA-4.3.0/Sentrion-MTA-4.3.0) with ESMTP id s1RGbLlZ026956 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 27 Feb 2014 11:37:22 -0500 X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd54.lss.emc.com s1RGbLlZ026956 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=emc.com; s=jan2013; t=1393519042; bh=xq2VdFFad1ZcHnEnYkSXCwwpp0s=; h=From:To:Date:Subject:Message-ID:References:In-Reply-To: Content-Type:MIME-Version; b=FQVY4JAB+LidFj/d2dB/+5ggDdgSAnk4X+Qm9qq4RE98ZTkSuodK/TcLZpmU5zwnO 8c+I9F1pSN5ljHR0p/owxUDNX8/lboiNi+kQZGomzmquapWMofP8biUc1zHO8rz3ap okBWsz3736SPoq3SwricWHJK2mcmjL6/Z215bPvo= X-DKIM: OpenDKIM Filter v2.4.3 mailuogwprd54.lss.emc.com s1RGbLlZ026956 Received: from mailusrhubprd01.lss.emc.com (mailusrhubprd01.lss.emc.com [10.253.24.19]) by maildlpprd51.lss.emc.com (RSA Interceptor); Thu, 27 Feb 2014 11:37:06 -0500 Received: from mxhub05.corp.emc.com (mxhub05.corp.emc.com [128.222.70.202]) by mailusrhubprd01.lss.emc.com (Sentrion-MTA-4.3.0/Sentrion-MTA-4.3.0) with ESMTP id s1RGb5w6031806 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 27 Feb 2014 11:37:05 -0500 Received: from mx36a.corp.emc.com ([169.254.1.101]) by mxhub05.corp.emc.com ([128.222.70.202]) with mapi; Thu, 27 Feb 2014 11:37:05 -0500 From: "Harrington, Christopher" To: "Roman D. Danyliw" , "mile@ietf.org" Date: Thu, 27 Feb 2014 11:37:03 -0500 Thread-Topic: Missing data elements useful for incident reporting Thread-Index: Ac8z1NvMAZc4YZH5S4+xbydbR0teBwABFy9A Message-ID: References: <359EC4B99E040048A7131E0F4E113AFCA411C8F9@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFCA411C8F9@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0000_01CF33B0.3C6A64E0" MIME-Version: 1.0 X-Sentrion-Hostname: mailusrhubprd01.lss.emc.com X-RSA-Classifications: public Archived-At: http://mailarchive.ietf.org/arch/msg/mile/Uhj5irjDZmv0XKW8ggFAr6Wc6N4 Subject: Re: [mile] Missing data elements useful for incident reporting X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Feb 2014 16:37:30 -0000 ------=_NextPart_000_0000_01CF33B0.3C6A64E0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit With respect to times there are 4 times that we track with regards to an incident. 1. Time the event (compromise) happened. 2. Time the event was discovered 3. Time when mitigations / response actions took place 4. Time of the indicator sharing (generation time) Tracking time this way allows us to better understand and prioritize our efforts. The time between #1 and #2 is what we call Dwell Time or Attacker Free Time. We monitor that closely. For cause of incident we map all of ours to the VERIS framework. Makes for much more consistent reporting and trend analysis. Thanks, --Chris Christopher Harrington Consulting Security Engineer GSO - Critical Incident Response Center EMC 174 Middlesex Turnpike Bedford, MA 01730 781-515-5862 (work) 603-583-1585 (cell) -----Original Message----- From: mile [mailto:mile-bounces@ietf.org] On Behalf Of Roman D. Danyliw Sent: Thursday, February 27, 2014 11:16 AM To: mile@ietf.org Subject: [mile] Missing data elements useful for incident reporting Hello! I cross-walked a few references describing the incident reporting process (e.g., NIST SP800-61 and CERT's Handbook for CSIRTs) and a number of operational reporting forms, and found that 5070bis can't easily represent these data fields: (1) Status of an Incident (e.g., New/In Progress/Ended/Resolved/Unknown; Occurring/Contained/Concluded/Future Threat) (2) Consortium-specific incident categories -- consortiums defined label classifying this incident (3) Mitigation factors -- a free form description on mitigating factors that influence the technical or business impact (4) Distinguishing between the report time (e.g., time when this incident was reported as occurring) vs. generation time (i.e., when this IODEF-Document was created). (5) Enumerating which organizations have been notified in the incident -- need to review current HistoryItem and Contact classes (6) RecoveryTime -- the wall-clock timestamp of when the impact of the incident was remediated. (7) Cause of the incident (e.g., misconfigured app, unpatched host) -- the SCI draft introduces Method/AdditionalData/Weakness and this may be sufficient. Does anyone feel we shouldn't add a particular data elements listed above to the data model? Roman _______________________________________________ mile mailing list mile@ietf.org https://www.ietf.org/mailman/listinfo/mile ------=_NextPart_000_0000_01CF33B0.3C6A64E0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIY2DCCA2Ew ggJJoAMCAQICEAoBAQEAAAJ8AAAACgAAAAIwDQYJKoZIhvcNAQEFBQAwOjEZMBcGA1UEChMQUlNB IFNlY3VyaXR5IEluYzEdMBsGA1UECxMUUlNBIFNlY3VyaXR5IDIwNDggVjMwHhcNMDEwMjIyMjAz OTIzWhcNMjYwMjIyMjAzOTIzWjA6MRkwFwYDVQQKExBSU0EgU2VjdXJpdHkgSW5jMR0wGwYDVQQL ExRSU0EgU2VjdXJpdHkgMjA0OCBWMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALeP VXHSgN17aXmn8BhQMjxiZ/YKlQfd5hvzntnSQVRrrZ98vhnN+0arQWgeGOpVyC+ReIko+ycpYP/f j4w7yUmbtaSUzgHqPrVje38m/RndwCG9hNEtT0bDTtzYNzk7KK/LnRrqK68hpcEjIri4G1oTh1eD 0fAg5+hPI0KwAKV9ienpYXOUmHEmvC1q4PdN8PG2KjgxgQ0p4QDBUQ9MUvgEWqp9ctO4hyq7YxAD KrOhTw1aXka3PQ71dOyZn/k9JIGIpt1gVOiVNj3GCZOaoxKAAFWZGUe90KV8w7r7H/f1D/isubX0 N5gTGN6FW7cMgjuHb5U5WDDabgFoFyLMwAsCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAOBgNV HQ8BAf8EBAMCAQYwHwYDVR0jBBgwFoAUB8NRMKSq6UWuNST6/yQsM9CxnYwwHQYDVR0OBBYEFAfD UTCkqulFrjUk+v8kLDPQsZ2MMA0GCSqGSIb3DQEBBQUAA4IBAQBfPoZ2brg1PE42HB55mL/91RIR eVIO7jGJvN1/+dHGFSHoigFUDTr7VLnWY9SxqpZNokJN1FMfixDef2W+YBMncYikc+OEY9GkVeFQ k+YbDnnQZ7xGyL8/Fw2V5saQad7ntC/elX3QEj89Pn9NPxRo9RFQ1cH0kKUIHTFg/2CMI1QKr/6h bsXReipoeM8eggogtB+t5YWyamh1Tq0lN5SFvr2h1Oq3DEs8negSAPBfrA3hrHBjc/d/eZ8yJUJ0 BYAov73BJJZYFbEXIemJS9sHiGf0Fa1wPi9NhTvCt9v+mGgjieF0D970xYRjKRvMywfJAKSp18Ii T2fXd+wgBWHeMIIEzDCCA7SgAwIBAgIQfwkpTisxI69dQcDR3n6N2TANBgkqhkiG9w0BAQUFADA6 MRkwFwYDVQQKExBSU0EgU2VjdXJpdHkgSW5jMR0wGwYDVQQLExRSU0EgU2VjdXJpdHkgMjA0OCBW MzAeFw0xMTAzMDMyMDUyMTVaFw0xOTA0MDExNDQ1MzlaMIGXMQswCQYDVQQGEwJVUzEWMBQGA1UE CBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHQmVkZm9yZDEZMBcGA1UEChMQUlNBIFNlY3VyaXR5 IExMQzElMCMGA1UECxMcR2xvYmFsIFNlY3VyaXR5IE9yZ2FuaXphdGlvbjEcMBoGA1UEAxMTUlNB IENvcnBvcmF0ZSBDQSB2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALaLCcEh7lhj dqYo6ryZ8oHK4kJRmQuxfwMa/3PE1Vd4U7U5x15UuSX+qd78hnEdR6yGGxhmY8U2SDG31u+yJD9o OpXFQm6/A4xzItwfcs6SD3Gt6nI/Oa6M0M/7MjPqSc1aUUm2NFiyb6DjotYLDzeAVCqF+4V/Dgc2 QdO1FZeFUCcb5lMqkVAr+O3uAEZEmtD3Cr06YavA38fxeWCiPoheUuWuAQcvOdEnSzJFm6GM8yBJ l9J1cAibE6c4DCl+eHj4M+O/ON2fFVb/lQdS4xO7cSZ9fKGCI7kWr0/7ssSjPsIIGpg0hLRZ35aZ fCK1fFLi9VKvIcTYTrA8Gf9bIGsCAwEAAaOCAW4wggFqMB8GA1UdIwQYMBaAFAfDUTCkqulFrjUk +v8kLDPQsZ2MMBIGA1UdEwEB/wQIMAYBAf8CAQMwcAYDVR0fBGkwZzBloGOgYYZfaHR0cDovL3d3 dy5yc2FzZWN1cml0eS5jb20vcHJvZHVjdHMva2Vvbi9yZXBvc2l0b3J5L2NlcnRpZmljYXRlX3N0 YXR1cy9SU0FfU2VjdXJpdHlfMjA0OF92My5DUkwwHQYDVR0OBBYEFHMbOEsly1qOvQLs310p9hB0 DtiYMIGRBgNVHSAEgYkwgYYwgYMGCSqGSIb3DQUGATB2MC4GCCsGAQUFBwIBFiJodHRwOi8vY2Eu cnNhc2VjdXJpdHkuY29tL0NQUy5odG1sMEQGCCsGAQUFBwICMDgwFxYQUlNBIFNlY3VyaXR5IExM QzADAgEBGh1DUFMgSW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTAOBgNVHQ8BAf8EBAMCAYYwDQYJ KoZIhvcNAQEFBQADggEBAHGIVCAjCZ+z2vRElolRsLsz4L/js0Zm019rr/+eFks5VnSf5T0HJj7Z tzjtna/+O5b01L8L6Fz64Yui+h/cnxvDwQrhzajbiMiN/JFH+kNOUJ9LcInBkmu45d98h+EQw3Yz XwfnHYaXLArfgeY3CP8AYi0pxXEXf0bH8Prl+P0n4SOUqxh6J0GIz/haW1+usvMscB7lCpJ2loo9 +TmRn3WQrokgr1ILm/3apel6ydpkoFUxEoP5a1806Z7SD9KljN+Vc9o521VkMtnzLlDEkn05by/p QNdlidY7eV7xcpCvuI6qFzyfHdI3G0/Vao0L0os6lEwb5PSa1IysLlHT0uUwggT+MIID5qADAgEC AhBiTV1a7zr4E+gcgJ4lG6TBMA0GCSqGSIb3DQEBBQUAMIGXMQswCQYDVQQGEwJVUzEWMBQGA1UE CBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHQmVkZm9yZDEZMBcGA1UEChMQUlNBIFNlY3VyaXR5 IExMQzElMCMGA1UECxMcR2xvYmFsIFNlY3VyaXR5IE9yZ2FuaXphdGlvbjEcMBoGA1UEAxMTUlNB IENvcnBvcmF0ZSBDQSB2MjAeFw0xMTAzMTAyMjQwMDRaFw0xOTAyMjgyMTU2MzNaMIGeMQswCQYD VQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHQmVkZm9yZDEZMBcGA1UE ChMQUlNBIFNlY3VyaXR5IExMQzElMCMGA1UECxMcR2xvYmFsIFNlY3VyaXR5IE9yZ2FuaXphdGlv bjEjMCEGA1UEAxMaUlNBIENsYXNzIDIgUGVyc29uYWwgQ0EgdjIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNEVsNPFZOP83bMzCpUDGnf/5IDIQvVRhDHkyrkbv5X1ih4xdTsSdzTDrj LUxIzC7nJswCv+jBaWWm1YoqzBXqQl2/Hl6T5Bt3HBT302GSYamtKcCWve25DoJav+dJd9U/XkCq SSNN7DNVXkJrKC7Zq7OS6/O308pZNkCRJJfMRrodgSx1NoQYZJCfufTOshslVSVhj3Ar274qmuf8 iqM0RR5OMpm7t2dtHzvYJPHR3+HwfQ+s64YBC7NBrBLOYMeq8tzkPKzyITXhwopgbM6gbp+Z8qX5 /lo4Y3OEm7ED51iDqdruRoRnfTQGKdZJT7IYGLH+x0roRKmYKP/2HRNpAgMBAAGjggE7MIIBNzAP BgNVHRMECDAGAQH/AgECMIGRBgNVHSAEgYkwgYYwgYMGCSqGSIb3DQUHAjB2MC4GCCsGAQUFBwIB FiJodHRwOi8vY2EucnNhc2VjdXJpdHkuY29tL0NQUy5odG1sMEQGCCsGAQUFBwICMDgwFxYQUlNB IFNlY3VyaXR5IExMQzADAgEBGh1DUFMgSW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTBABgNVHR8E OTA3MDWgM6Axhi9odHRwOi8vY3JsLnJzYXNlY3VyaXR5LmNvbS9SU0FDb3Jwb3JhdGVDQXYyLmNy bDAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFBQw62v19Em1aFJ1ptu9rlvIrH1MMB8GA1UdIwQY MBaAFHMbOEsly1qOvQLs310p9hB0DtiYMA0GCSqGSIb3DQEBBQUAA4IBAQCPepLT4buLa9p5VwF1 OW2YUwliCqxecs0CxRGJVR4cwvOuMeXxutP+m51n3vzseGkM0d1fmA9JTz8X+5LFdRD12Iw124oj 79QA7NKhO/xoPgbo0QxgnvHS15o94BPvFiZE6QGUjkHs9/hDvU+eIx7OG+Kzxt47vZZef+fJF0+s ZgEDIMXXPXAtJW3xg/JhPrl4z0L7gmjgO+KxV0cyxaDrk6SEW5zZCqAcLehnW7MH8vvlzMsQ6pVr f1g8xMCJonyxow9AwXGyQ0z1866qbJ8t+nQC/sGx3msJVHQg1JyjOWF4PMm8DdeUt+qUrSFRLY4J MroY51gM90nnhtijtleCMIIFxTCCBK2gAwIBAgIRAIQ3oNuoPqBS3YhDUJp3rlQwDQYJKoZIhvcN AQEFBQAwgZ4xCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMRAwDgYDVQQHEwdC ZWRmb3JkMRkwFwYDVQQKExBSU0EgU2VjdXJpdHkgTExDMSUwIwYDVQQLExxHbG9iYWwgU2VjdXJp dHkgT3JnYW5pemF0aW9uMSMwIQYDVQQDExpSU0EgQ2xhc3MgMiBQZXJzb25hbCBDQSB2MjAeFw0x MzA2MTkxMTAwNThaFw0xNTA2MTkxMTAwNThaMIHvMRMwEQYKCZImiZPyLGQBGRYDY29tMRMwEQYK CZImiZPyLGQBGRYDZW1jMRgwFgYDVQQKEw9FTUMgQ29ycG9yYXRpb24xETAPBgNVBAsTCEFtZXJp Y2FzMRwwGgYDVQQLExNJbmZvcm1hdGlvbiBTeXN0ZW1zMQ8wDQYDVQQFEwYxMjI3NjUxFzAVBgoJ kiaJk/IsZAEBEwdoYXJyaWM4MR8wHQYDVQQDExZDaHJpc3RvcGhlciBIYXJyaW5ndG9uMS0wKwYJ KoZIhvcNAQkBFh5jaHJpc3RvcGhlci5oYXJyaW5ndG9uQGVtYy5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDIBKcM4e/EfofFwfGGTTzP9Q5h+TbnMfUHaXkYleI6YteMOkHmp+f3 6y9+TztCDzpypIBDHJ61t9jP3Wl1ktHiRvXUyjvciaJuVGNSlhqik/9i94jfWeb0Tw5bjFWgnFyW f4nk51Zu2NvMfCVA3Uu6PS7pf1vWkkDs37XIX3zHeATa189aQRHS8enAItBbC8aE38b+H4Umy2Nm IQQFtXbkB3pzzBImFujgbZdx8PrjRmBaIfXNXIaLDkTc8VmF1MkxSk2Gwt4BeLE5xGMWtTqXv3j8 D7YTk416tj/vIpe+t/cSa7eiydNP74no4GMSRhY4Z6iaX+A+kCTshLze/4w5AgMBAAGjggGpMIIB pTAfBgNVHSMEGDAWgBQUMOtr9fRJtWhSdabbva5byKx9TDCBkQYDVR0gBIGJMIGGMIGDBgkqhkiG 9w0FBwUwdjAuBggrBgEFBQcCARYiaHR0cDovL2NhLnJzYXNlY3VyaXR5LmNvbS9DUFMuaHRtbDBE BggrBgEFBQcCAjA4MBcWEFJTQSBTZWN1cml0eSBMTEMwAwIBARodQ1BTIEluY29ycG9yYXRlZCBi eSByZWZlcmVuY2UwKQYDVR0lBCIwIAYKKwYBBAGCNxQCAgYIKwYBBQUHAwIGCCsGAQUFBwMEMEoG A1UdEQRDMEGBHmNocmlzdG9waGVyLmhhcnJpbmd0b25AZW1jLmNvbaAfBgorBgEEAYI3FAIDoBEM D2hhcnJpYzhAZW1jLmNvbTAOBgNVHQ8BAf8EBAMCB4AwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDov L2NybC5yc2FzZWN1cml0eS5jb206ODAvUlNBQ2xhc3MyUGVyc29uYWxDQXYyLmNybDAdBgNVHQ4E FgQU8PcZ+AZ1SlXp4EE3P4yjbslfqpIwDQYJKoZIhvcNAQEFBQADggEBAL9Or82VcAEw1PGuPbBD QzDy1rwrjFwoN9nMuNaMdqtgNlhhiHldOOlccTiXJVMykbmY3brFqTnvwCA9vMnJJnRqHPfZp5ic waWVpn8H50FHx0o4ftycPEl0oH9RPOJgDc/t/jHpLpLB94kHxyxQ4vJundplDbR2LYsUZa03GBMo hvfMuiKw0CeBr1R7x4WIiseWQ4KB71zmW3AbsYI9y0q9DlHIgtNmfOj84tY9f2QC3ndMkmSGvmMm X7DWCMnlHPN+0FiRkMqOeoYFwRaTeRM1i2Sm91E83TNRmb7f6xzIc4mLsHKP2Jui5nA/V8NWvTqI YhCkCB0cZkc91ehe4n4wggXUMIIEvKADAgECAhAzkGSOsA6fNPJDSK+W/N5kMA0GCSqGSIb3DQEB BQUAMIGeMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHQmVk Zm9yZDEZMBcGA1UEChMQUlNBIFNlY3VyaXR5IExMQzElMCMGA1UECxMcR2xvYmFsIFNlY3VyaXR5 IE9yZ2FuaXphdGlvbjEjMCEGA1UEAxMaUlNBIENsYXNzIDIgUGVyc29uYWwgQ0EgdjIwHhcNMTMw NjE5MTUwNDQ1WhcNMTUwNjE5MTUwNDIxWjCB8zETMBEGCgmSJomT8ixkARkWA2NvbTETMBEGCgmS JomT8ixkARkWA2VtYzEYMBYGA1UEChMPRU1DIENvcnBvcmF0aW9uMREwDwYDVQQLEwhBbWVyaWNh czEcMBoGA1UECxMTSW5mb3JtYXRpb24gU3lzdGVtczEPMA0GA1UEBRMGMTIyNzY1MRcwFQYKCZIm iZPyLGQBARMHaGFycmljODEjMCEGA1UEAxMaQ2hyaXN0b3BoZXIgSGFycmluZ3Rvbi1FbmMxLTAr BgkqhkiG9w0BCQEWHmNocmlzdG9waGVyLmhhcnJpbmd0b25AZW1jLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALkuHI2WDll/BOd40HVywnDJpkxwxGs0Hpqxmikq298tLVn4QxLr LhdIFtW+8Ish3Cfat2810FCTAbmh855JYkAJlj2zMx5s4hri45l4cRpRVeWxdH0o5X278NS2ZXU2 DDJAa3Dx46gTz9/xRE4EAoHtMhr5Vr9rDOqkfCmAZmd1kOeQF3W1SmUgaPxEIHp27s0Sso5khGdc 2/2GyEmos4dJ86PaaZbpf9lcZwC5LVfcpa9ZOXh6bqd7U8hDznZ5PRJB6k+CAFBrt+WiYvsYG7is IYIPXrCkUVuRYkXupXqXqu5OEs3ANeAG+ehJxn6Ww+mZeYJfOSAWLARLWsI5ZGsCAwEAAaOCAbUw ggGxMDUGA1UdJQQuMCwGCisGAQQBgjcUAgIGCCsGAQUFBwMCBggrBgEFBQcDBAYKKwYBBAGCNwoD BDAfBgNVHSMEGDAWgBQUMOtr9fRJtWhSdabbva5byKx9TDCBkQYDVR0gBIGJMIGGMIGDBgkqhkiG 9w0FBwUwdjAuBggrBgEFBQcCARYiaHR0cDovL2NhLnJzYXNlY3VyaXR5LmNvbS9DUFMuaHRtbDBE BggrBgEFBQcCAjA4MBcWEFJTQSBTZWN1cml0eSBMTEMwAwIBARodQ1BTIEluY29ycG9yYXRlZCBi eSByZWZlcmVuY2UwSgYDVR0RBEMwQYEeY2hyaXN0b3BoZXIuaGFycmluZ3RvbkBlbWMuY29toB8G CisGAQQBgjcUAgOgEQwPaGFycmljOEBlbWMuY29tMEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9j cmwucnNhc2VjdXJpdHkuY29tOjgwL1JTQUNsYXNzMlBlcnNvbmFsQ0F2Mi5jcmwwHQYDVR0OBBYE FFp5a07UDPJYJvedFEuB1U2ACAW1MA4GA1UdDwEB/wQEAwIDODANBgkqhkiG9w0BAQUFAAOCAQEA PaMUkDlrJh/pKXE9hwn4NJny1feBdfjqRUlziiKo3/+Jwn3YToU+nh+uic4anPiw+Iv1N1apK5mW aPCu36xFhgtVBnbSJQ0c+Aeal1HxRttlJp2AtQ8WBYN2eJ7NkEHajhTU+49GL6woFU9cKS+GI9cp QU6H2E/eYe628ngK/sTqfUF2HZalvwLcQZAr7RkrLcOYt8PsXFZmijVGZC76wI4xRfo4o9Of1epL jZ0FmhRy3sfnLuEmDBuOOnlQSkyBUinHcv0g0QhZ8WOvhocAvobbYXk67ADjRF2MV/J6jHq+lQVG p5/DLic0VM0W/gRcpZmZu5DYeK/TJD8ohGaq1zGCBHswggR3AgEBMIG0MIGeMQswCQYDVQQGEwJV UzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHQmVkZm9yZDEZMBcGA1UEChMQUlNB IFNlY3VyaXR5IExMQzElMCMGA1UECxMcR2xvYmFsIFNlY3VyaXR5IE9yZ2FuaXphdGlvbjEjMCEG A1UEAxMaUlNBIENsYXNzIDIgUGVyc29uYWwgQ0EgdjICEQCEN6DbqD6gUt2IQ1Cad65UMAkGBSsO AwIaBQCgggKbMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE0MDIy NzE2MzcwM1owIwYJKoZIhvcNAQkEMRYEFHbHsvVNFMndPsWx6Ny7qSmGpmOLMIGrBgkqhkiG9w0B CQ8xgZ0wgZowCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQME AQIwDgYIKoZIhvcNAwICAgCAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgFAMA0GCCqGSIb3DQMCAgEo MAcGBSsOAwIaMAsGCWCGSAFlAwQCAzALBglghkgBZQMEAgIwCwYJYIZIAWUDBAIBMIHEBgkrBgEE AYI3EAQxgbYwgbMwgZ4xCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMRAwDgYD VQQHEwdCZWRmb3JkMRkwFwYDVQQKExBSU0EgU2VjdXJpdHkgTExDMSUwIwYDVQQLExxHbG9iYWwg U2VjdXJpdHkgT3JnYW5pemF0aW9uMSMwIQYDVQQDExpSU0EgQ2xhc3MgMiBQZXJzb25hbCBDQSB2 MgIQM5BkjrAOnzTyQ0ivlvzeZDCBxgYLKoZIhvcNAQkQAgsxgbaggbMwgZ4xCzAJBgNVBAYTAlVT MRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMRAwDgYDVQQHEwdCZWRmb3JkMRkwFwYDVQQKExBSU0Eg U2VjdXJpdHkgTExDMSUwIwYDVQQLExxHbG9iYWwgU2VjdXJpdHkgT3JnYW5pemF0aW9uMSMwIQYD VQQDExpSU0EgQ2xhc3MgMiBQZXJzb25hbCBDQSB2MgIQM5BkjrAOnzTyQ0ivlvzeZDANBgkqhkiG 9w0BAQEFAASCAQCLCNOy1sRi48BGWg433Brj/SUS6FaqgITvRRCDgKJDht1uAk1J3SkCjomI45ad JrFKi6L9NpRlBiMLTWUGaJ38MVPr5G8jX2718dqQLOa/X3m4sX06jwjSf3ds2h7lum9STD2qcs9G yqiKZzWOiA6uPPTBuxgTxLgYrxASObmUiY2wFG0j/QZqKN7rTM2w4upi23wPH9QUeH/2Hzhq5jtM C6R44rr6FkX/EWmaMsos3H+dzVsXVsYu7CcpMDc8D5ZUnSFlC1RX31fmYMNXx5XwKfvaoTCIc8GW YEexjbP7zVRUsWz1v/330r/5zJQWFgf7yG8l4jgnC0e28BN+rDv/AAAAAAAA ------=_NextPart_000_0000_01CF33B0.3C6A64E0-- From nobody Fri Feb 28 22:50:39 2014 Return-Path: X-Original-To: mile@ietfa.amsl.com Delivered-To: mile@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A78B11A040A for ; Fri, 28 Feb 2014 22:50:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.001 X-Spam-Level: X-Spam-Status: No, score=-1.001 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, J_CHICKENPOX_25=0.6, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q5NlMi-NUYpk for ; Fri, 28 Feb 2014 22:50:35 -0800 (PST) Received: from shetland.sei.cmu.edu (shetland.sei.cmu.edu [192.58.107.44]) by ietfa.amsl.com (Postfix) with ESMTP id 6F20E1A02CE for ; Fri, 28 Feb 2014 22:50:34 -0800 (PST) Received: from pawpaw.sei.cmu.edu (pawpaw.sei.cmu.edu [10.64.21.22]) by shetland.sei.cmu.edu (8.14.4/8.14.4/1408) with ESMTP id s216oVuK012324 for ; Sat, 1 Mar 2014 01:50:31 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1393656631; bh=AregIwwUVH2Z6T6fAsFZAgu7lyfmiXpi4FWSypwjtvY=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=l+AjpBs0l2bKOGOSMtrT6ihxO1hYWLuKhHrBdH4IKx2LcKBGf64O3xdmc9vbvo0Xb G4lyZQwq8LaLRxHzHGHFeJbfpcGyVIT5olTZIQYXtbJ/qYDmuv7yON2U/0VMa4djm4 lJQS/ZJFqrlScCD6Mq5Qhy+SCNPfbiIijblnZj2M= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by pawpaw.sei.cmu.edu (8.14.4/8.14.4/1456) with ESMTP id s216oa7j006741 for ; Sat, 1 Mar 2014 01:50:36 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.02.0347.000; Sat, 1 Mar 2014 01:49:44 -0500 From: "Roman D. Danyliw" To: "mile@ietf.org" Thread-Topic: Redesign of indicators Thread-Index: Ac81GXCwVcTvE0ReRDecx1CWMwKJcg== Date: Sat, 1 Mar 2014 06:49:44 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFCA411FF8A@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/mile/9f65lDg0WuyinO8ntlAjNIf5BCI Subject: [mile] Redesign of indicators X-BeenThere: mile@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Managed Incident Lightweight Exchange, IODEF extensions and RID exchanges" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Mar 2014 06:50:37 -0000 Hello! Nearly a year ago, the challenge with adding additional indicator sharing c= lasses to the existing incident reporting data model in IODEF was noted [1,= =20 http://www.ietf.org/mail-archive/web/mile/current/msg00985.html]. As we en= umerate the outstanding actions to bring 5070bis to closure, this central i= ssue needs to be resolved. The text is littered with references to data el= ements representing some part of "the incident" making it awkward for an im= plementer solely interested in sharing indicators. However, for all of the= interest in using IODEF to convey indicators, two key constructs added=20 to the data model to support indicators (i.e., @indicator-uid/set-id and at= tributes with "-watchlist" values) remain undocumented (see Issue #41 and #= 42). Furthermore, Issue #14, to add predicate logic to these indicators is= unresolved. This email is a _rough_ proposal to bridge these two use cases. The summar= y of this proposal is that we should think of indicators as being the produ= ct of analyzing an incident. Sometimes, an IODEF document will only descri= be the specific events an incident; it might describe the incident and the = indicators derived from it; or in another instance the details of the incid= ent might not be shared at all but the derived indicators would be. =20 This proposal suggests that we move all indicator-specific information to a= new distinct class, IndicatorData, that is a child of Incident. Indicator= s can be described outright in this new class, or can be defined by referen= ce by pointing to specific data (e.g., Address or DomainData) already desc= ribed elsewhere in the IODEF document. This proposal addresses current ope= n issues #14 (predicate logic for indicators) and #28 (specifying time wind= ows for indicators) by suggesting a data model to cover these use cases. I= ssue #41 (documenting @indicator-* attributes) is resolved by redefining @i= ndicator-uid and removing @indicator-set-id. Issue #42 (documenting "-watc= hlist" attributes) is resolved by removing all these attribute values as th= ey are no longer necessary. Consider the following XML-snippets to get a sense of how such an approach = would look: -------------[ Begin XML Examples ]----------------- ... www4.example.com ... indicator-1 My First Indicator www1.example.com www2.example.com www3.example.com indicator-2 My Second Indicator www1.example.com indicator-3 My Third Indicator www1.example.com indicator-4 My Fourth Indicator www1.example.com indicator-5 My Fifth Indicator indicator-6 My Sixth Indicator 2013-06-08T05:44:53-05:00 2014-06-08T05:44:53-05:00 indicator-7 My Seventh Indicator