From Thomas.Graf@swisscom.com Sat Jan 20 01:02:51 2024 Return-Path: X-Original-To: opsawg@ietfa.amsl.com Delivered-To: opsawg@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D52CC14CF05; Sat, 20 Jan 2024 01:02:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.106 X-Spam-Level: X-Spam-Status: No, score=-7.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=swisscom.com Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1SsvQzfmKwpR; Sat, 20 Jan 2024 01:02:46 -0800 (PST) Received: from mail.swisscom.com (mailout120.swisscom.com [138.188.166.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC529C14CEFE; Sat, 20 Jan 2024 01:02:44 -0800 (PST) Received: by mail.swisscom.com; Sat, 20 Jan 2024 10:02:42 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=swisscom.com; s=iscm; t=1705741362; bh=vVpTG5BkGh2AdWoPhNdAL9mMsUDdgwAEXJ1qtkUrEos=; h=From:To:CC:Subject:Date:References:In-Reply-To; b=Z9MpKE32A6IrIPSwtQfG+cKEMAyXt8vCQCImHBy+1Cj7sJ8cu8LaShhVJ9GmmWpdx mbLdoHmlz5bMjtUeSYZoaLVhA1oQp5DojR3DYtXtYYo2EGFdkVFr3F0NIOsrrCvFXW 0ccSVNrESEx3rjsub5Ta0aKd5zUJOLA6fMsJTn5QJozH+BCsb6ZBeiqmlbG3ul5H8D shmegeABJcC7saiMCLBFNGi2rGczEjKUVT6L7eLtm16g5qyFkQSEScB5atFBDQqPvQ xxoNM+mEi3yE3QR1R9SpzggLdca8nBxyt4VR/HMNslanrwXGOt+GUyNJSWtdueBmfL 5QyziExPZys/g== MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="----=_Part_3790906_831550018.1705741361992" X-Mailer: Totemo_TrustMail_(Notification) From: To: , , CC: Thread-Topic: draft-ietf-opsawg-tsvwg-udp-ipfix-03 shepherd review Thread-Index: AdpGCv0xRzm4uqXNSa2XISJH3o9oJABkg3ZAAPfBFTA= Date: Sat, 20 Jan 2024 09:02:39 +0000 Message-ID: <14920e8def27452db4ce21ca55ce577d@swisscom.com> References: <0d373b5349f144609de96a3a7982a8f5@swisscom.com> In-Reply-To: Accept-Language: en-US, de-CH Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ActionId=3a6f4633-03db-43d8-bba5-8debab28b4b7; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ContentBits=0; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Enabled=true; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Method=Privileged; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Name=unrestricted_parent.2; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SetDate=2024-01-15T10:28:04Z; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SiteId=90c7a20a-f34b-40bf-bc48-b9253b6f5d20; MSIP_Label_2e1fccfb-80ca-4fe1-a574-1516544edb53_ActionId=30057262-9f10-4b21-9318-c1959b5b0b6f; MSIP_Label_2e1fccfb-80ca-4fe1-a574-1516544edb53_ContentBits=0; MSIP_Label_2e1fccfb-80ca-4fe1-a574-1516544edb53_Enabled=true; MSIP_Label_2e1fccfb-80ca-4fe1-a574-1516544edb53_Method=Standard; MSIP_Label_2e1fccfb-80ca-4fe1-a574-1516544edb53_Name=C2 Internal; MSIP_Label_2e1fccfb-80ca-4fe1-a574-1516544edb53_SetDate=2024-01-13T10:23:36Z; MSIP_Label_2e1fccfb-80ca-4fe1-a574-1516544edb53_SiteId=364e5b87-c1c7-420d-9bee-c35d19b557a1; x-originating-ip: [138.188.161.184] X-CFilter-Loop: Reflected X-Trustmail: processed Archived-At: Subject: Re: [OPSAWG] draft-ietf-opsawg-tsvwg-udp-ipfix-03 shepherd review X-BeenThere: opsawg@ietf.org X-Mailman-Version: 2.1.39 Precedence: list List-Id: OPSA Working Group Mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jan 2024 09:02:51 -0000 ------=_Part_3790906_831550018.1705741361992 Content-Type: multipart/alternative; boundary="_000_14920e8def27452db4ce21ca55ce577dswisscomcom_" Content-Language: en-US --_000_14920e8def27452db4ce21ca55ce577dswisscomcom_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Dear Med, Thanks a lot for addressing all my points. I updated and submitted my shepherd review: https://datatracker.ietf.org/do= c/draft-ietf-opsawg-tsvwg-udp-ipfix/shepherdwriteup/ I agree with your assessment on Joe's comment that having a figure on udp o= ptions packet header and short description on SAFE and UNSAFE options helps= the reader to understand the context. It is clear that they are not define= d within this document. I will track the discussion on unsigned256 vs bitfield and update the sheph= erd review accordingly. Best wishes Thomas From: mohamed.boucadair@orange.com Sent: Monday, January 15, 2024 11:32 AM To: Graf Thomas, INI-NET-VNC-HCS ; draft-ietf-ops= awg-tsvwg-udp-ipfix.authors@ietf.org; draft-ietf-opsawg-tsvwg-udp-ipfix.cha= irs@ietf.org Subject: RE: draft-ietf-opsawg-tsvwg-udp-ipfix-03 shepherd review Be aware: This is an external email. Hi Thomas, all, Let's me first wish you a Happy New Year ! Thank you for the careful shepherd review. A new version that addresses the= review is now online: https://datatracker.ietf.org/doc/draft-ietf-opsawg-t= svwg-udp-ipfix/05/. Please note that I didn't change to unsigned64 because = in theory we need to cover up to 256 bits to map the full options range. Cheers, Med De : Thomas.Graf@swisscom.com > Envoy=E9 : samedi 13 janvier 2024 12:17 =C0 : draft-ietf-opsawg-tsvwg-udp-ipfix.authors@ietf.org; draft-ietf-opsawg-tsvwg-udp-ipfix= .chairs@ietf.org Objet : draft-ietf-opsawg-tsvwg-udp-ipfix-03 shepherd review Dear Joe, Tianran and Henk, Thanks a lot for entrusting me. I have done the first shepherd review of th= e 3 IPFIX drafts. Since this is my first Shepherd review, please have a bri= ef look before submitting to the data tracker. One clarification question. There is a OPS area review pending, the review = from the Internet and Transport area needs to be addressed by the authors, = I suggest to have a review from the IPFIX experts as well as described in p= oint 6 and I have some minor editorial remarks (see below). Once all done I= believe we are ready to move forward to the IESG with this document. Shoul= d I wait with the Shepherd submission or submit it now and update it later = as we progress? Dear Med and Tirumaleswar, Thanks a lot. The document is very well written and straight forward. I have reviewed the document. I agree with the feedback from the Transport = area that the data type of udpOptions should be unsigned64 instead of unsig= ned since https://www.rfc-editor.org/rfc/rfc7011#section-6.2 describes that= unsigned64 can be reduced-size encoded in unsigned32. I suggest to change = the wording in https://datatracker.ietf.org/doc/html/draft-ietf-opsawg-tsvw= g-udp-ipfix-03#section-4.1 from "The encoding specified in" to "The reduced= -size encoding specified in" to make the meaning of the reference more clea= r. Regarding the abstract data type and the data type semantics of udpExpOptio= nExID and udpUnsafeExpOptionExID. I am unsure wherever octetArray with iden= tifier fits or not. I tend to agree with your assessment. I reviewed https://datatracker.ietf.org/doc/html/rfc7012#section-3.1.13 https://datatracker.ietf.org/doc/html/rfc7012#section-3.2.4 https://datatracker.ietf.org/doc/html/rfc7012#section-3.2.5 and also checked https://www.iana.org/assignments/ipfix/ipfix.xhtml where I only found IE464 internalAddressRealm IE465 externalAddressRealm I understand that flags won't fit according to https://datatracker.ietf.org= /doc/html/rfc7012#section-3.2.5 due to "represents a set of bit fields" ver= sus a single value we have here. Below are some nits I found. replace "experiements" with "experiments" replace "Expermients" with "Experiments" replace "less-signficant" with "less-significant" Adjust the following references to draft-ietf-tsvwg-udp-options-28 From https://datatracker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-23#secti= on-10 To https://datatracker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-28#secti= on-12 From https://datatracker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-23#secti= on-23 To https://datatracker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-28#secti= on-25 From https://datatracker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-23#secti= on-8 To https://datatracker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-28#secti= on-10 And below the output from idnits. Otherwise all perfect. I agree due to the draft-ietf-tsvwg-udp-options depe= ndency the content of this document should not be part of draft-ietf-opsawg= -ipfix-tcpo-v6eh. I will review draft-ietf-opsawg-ipfix-tcpo-v6eh next. I l= ike that this document, draft-ietf-opsawg-ipfix-tcpo-v6eh and draft-ietf-ts= vwg-udp-options is being submitted about the same time to IESG. From a netw= ork operator perspective, I can't ask more to have a new transport protocol= RFC ready at the same time when the IPFIX entities are being defined. Well= done. Best wishes Thomas idnits 2.17.1 draft-ietf-opsawg-tsvwg-udp-ipfix-03.txt: Checking boilerplate required by RFC 5378 and the IETF Trust (see https://trustee.ietf.org/license-info): -------------------------------------------------------------------------= --- No issues found here. Checking nits according to https://www.ietf.org/id-info/1id-guidelines.tx= t: -------------------------------------------------------------------------= --- =3D=3D There are 6 instances of lines with non-ascii characters in the do= cument. Checking nits according to https://www.ietf.org/id-info/checklist : -------------------------------------------------------------------------= --- No issues found here. Miscellaneous warnings: -------------------------------------------------------------------------= --- =3D=3D The copyright year in the IETF Trust and authors Copyright Line do= es not match the current year =3D=3D The document doesn't use any RFC 2119 keywords, yet seems to have = RFC 2119 boilerplate text. -- The document date (17 October 2023) is 88 days in the past. Is this intentional? Checking references for intended status: Proposed Standard -------------------------------------------------------------------------= --- (See RFCs 3967 and 4897 for information about using normative referenc= es to lower-maturity documents in RFCs) =3D=3D Outdated reference: A later version (-28) exists of draft-ietf-tsvwg-udp-options-23 =3D=3D Outdated reference: A later version (-11) exists of draft-ietf-tsvwg-udp-options-dplpmtud-10 Summary: 0 errors (**), 0 flaws (~~), 5 warnings (=3D=3D), 1 comment (= --). Run idnits with the --verbose option for more detailed information abo= ut the items above. ___________________________________________________________________________= _________________________________ Ce message et ses pieces jointes peuvent contenir des informations confiden= tielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu= ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages el= ectroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou = falsifie. Merci. This message and its attachments may contain confidential or privileged inf= ormation that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and dele= te this message and its attachments. As emails may be altered, Orange is not liable for messages that have been = modified, changed or falsified. Thank you. --_000_14920e8def27452db4ce21ca55ce577dswisscomcom_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Dear Med,

 

Thanks a lot for = addressing all my points.

 =

I updated and sub= mitted my shepherd review: https://datatracker.ietf.org/doc/draft-ietf-opsawg-tsvwg-udp-ipfix/shepherd= writeup/

 =

I agree with your= assessment on Joe's comment that having a figure on udp options packet hea= der and short description on SAFE and UNSAFE options helps the reader to understand the context. It is clear that they are not = defined within this document.

 = 

I will track the discussion on unsigned256 vs bitfie=
ld and update the shepherd review accordingly.
 
Best wishes
Thomas

 

From: mohamed.boucadair@orange.com <mohamed.boucadair@orange.com&g= t;
Sent: Monday, January 15, 2024 11:32 AM
To: Graf Thomas, INI-NET-VNC-HCS <Thomas.Graf@swisscom.com>; d= raft-ietf-opsawg-tsvwg-udp-ipfix.authors@ietf.org; draft-ietf-opsawg-tsvwg-= udp-ipfix.chairs@ietf.org
Subject: RE: draft-ietf-opsawg-tsvwg-udp-ipfix-03 shepherd review

 

Be aware: This is an external email.

 

Hi Thomas, all,

 

Let’s me first wish you a H= appy New Year !

 

Thank you for the careful shepher= d review. A new version that addresses the review is now online: https://datatracker.ietf.org/doc/draft-ietf-opsawg-tsvwg-udp-ipfix/05/.= Please note that I didn’t change to unsigned64 because in theory we = need to cover up to 256 bits to map the full options range.

 

Cheers,

Med

 

De : Thomas.Graf@swisscom.com <Thomas.Graf@swisscom.com>
Envoy=E9 : samedi 13 janvier 2024 12:17
=C0 : draft-ietf-opsawg-tsvwg-udp-ipfix.authors@ietf.org; draft-= ietf-opsawg-tsvwg-udp-ipfix.chairs@ietf.org
Objet : draft-ietf-opsawg-tsvwg-udp-ipfix-03 shepherd review

 

Dear Joe, Tianran and Henk,

 

Thanks a lot for entrusting me.= I have done the first shepherd review of the 3 IPFIX drafts. Since this is= my first Shepherd review, please have a brief look before submitting to the data tracker.

 

One clarification question. The= re is a OPS area review pending, the review from the Internet and Transport= area needs to be addressed by the authors, I suggest to have a review from the IPFIX experts as well as described in point 6 an= d I have some minor editorial remarks (see below). Once all done I believe = we are ready to move forward to the IESG with this document. Should I wait = with the Shepherd submission or submit it now and update it later as we progress?

 

 

Dear Med and Tirumaleswar,=

 

Thanks a lot. The document is v= ery well written and straight forward.

 

I have reviewed the document. I= agree with the feedback from the Transport area that the data type of udpO= ptions should be unsigned64 instead of unsigned since https= ://www.rfc-editor.org/rfc/rfc7011#section-6.2 describes that unsigned64= can be reduced-size encoded in unsigned32. I suggest to change the wording= in https://datatracker.ietf.org/doc/html/draft-ietf-opsawg-tsvwg-udp-ipfix-03#= section-4.1 from "The encoding specified in" to "The red= uced-size encoding specified in" to make the meaning of the reference = more clear.

 

Regarding the abstract data typ= e and the data type semantics of udpExpOptionExID and udpUnsafeExpOptionExI= D. I am unsure wherever octetArray with identifier fits or not. I tend to agree with your assessment.

 

I reviewed

 

https://datatracker.ietf.org/doc/= html/rfc7012#section-3.1.13

https://datatracker.ietf.org/doc/h= tml/rfc7012#section-3.2.4

https://datatracker.ietf.org/doc/h= tml/rfc7012#section-3.2.5

 

and also checked

 

https://www.iana.org/assignments/ipfix/ipfi= x.xhtml

 

where I only found

 

IE464    internalAddr= essRealm

IE465    externalAddr= essRealm

 

I understand that flags won't f= it according to htt= ps://datatracker.ietf.org/doc/html/rfc7012#section-3.2.5 due to "<= /span>represents a set of bit fields" versus a single valu= e we have here.

 

Below are some nits I found.

 

replace "experiements"= ; with "experiments"

replace "Expermients"= with "Experiments"

replace "less-signficant&q= uot; with "less-significant"

 

Adjust the following references= to draft-ietf-tsvwg-udp-options-28

 

From

https://datat= racker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-23#section-10

 

To

https://datat= racker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-28#section-12

 

 

From

https://datat= racker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-23#section-23

 

To

https://datat= racker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-28#section-25

 

 

From

https://datatr= acker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-23#section-8<= /o:p>

 

To

https://datat= racker.ietf.org/doc/html/draft-ietf-tsvwg-udp-options-28#section-10

 

 

And below the output from idnit= s.

 

Otherwise all perfect. I agree = due to the draft-ietf-tsvwg-udp-options dependency the content of this docu= ment should not be part of draft-ietf-opsawg-ipfix-tcpo-v6eh. I will review draft-ietf-opsawg-ipfix-tcpo-v6eh next. I like that this doc= ument, draft-ietf-opsawg-ipfix-tcpo-v6eh and draft-ietf-tsvwg-udp-options i= s being submitted about the same time to IESG. From a network operator pers= pective, I can't ask more to have a new transport protocol RFC ready at the same time when the IPFIX entitie= s are being defined. Well done.

 

Best wishes

Thomas

 

 

idnits 2.17.1

 

draft-ietf-opsawg-tsvwg-udp-ipfix-03.txt:

 

  Checking boilerplate required by RFC 5378 and the IETF Trust (see<= o:p>

  htt= ps://trustee.ietf.org/license-info):<= /span>

  ------------------------------------= ----------------------------------------

 

     No issues found he= re.

 

  Checking nits according to https://www.ietf.org/id-info/1id-guidelines.txt:

  ------------------------------------= ----------------------------------------

 

  =3D=3D There are 6 instances of line= s with non-ascii characters in the document.

 

 

  Checking nits according to ht= tps://www.ietf.org/id-info/checklist :

  ------------------------------------= ----------------------------------------

 

     No issues found he= re.

 

  Miscellaneous warnings:

  ------------------------------------= ----------------------------------------

 

  =3D=3D The copyright year in the IET= F Trust and authors Copyright Line does not

     match the current = year

 

  =3D=3D The document doesn't use any = RFC 2119 keywords, yet seems to have RFC

     2119 boilerplate t= ext.

 

  -- The document date (17 October 202= 3) is 88 days in the past.  Is this

     intentional?<= /o:p>

 

 

  Checking references for intended sta= tus: Proposed Standard

  ------------------------------------= ----------------------------------------

 

     (See RFCs 3967 and= 4897 for information about using normative references

     to lower-maturity = documents in RFCs)

 

  =3D=3D Outdated reference: A later v= ersion (-28) exists of

     draft-ietf-tsvwg-u= dp-options-23

 

  =3D=3D Outdated reference: A later v= ersion (-11) exists of

     draft-ietf-tsvwg-u= dp-options-dplpmtud-10

 

 

     Summary: 0 errors = (**), 0 flaws (~~), 5 warnings (=3D=3D), 1 comment (--).<= /p>

 

     Run idnits with th= e --verbose option for more detailed information about

     the items above.

____________________________________________________=
________________________________________________________<=
/pre>

Ce message et ses pieces jointes peuvent contenir de=
s informations confidentielles ou privilegiees et ne doivent donc


pas etre diffuses, exploites ou copies sans autorisa=
tion. Si vous avez recu ce message par erreur, veuillez le signaler


a l'expediteur et le detruire ainsi que les pieces j=
ointes. Les messages electroniques etant susceptibles d'alteration,


Orange decline toute responsabilite si ce message a =
ete altere, deforme ou falsifie. Merci.


 


This message and its attachments may contain confide=
ntial or privileged information that may be protected by law;


they should not be distributed, used or copied witho=
ut authorisation.


If you have received this email in error, please not=
ify the sender and delete this message and its attachments.


As emails may be altered, Orange is not liable for m=
essages that have been modified, changed or falsified.

Thank you.
--_000_14920e8def27452db4ce21ca55ce577dswisscomcom_-- ------=_Part_3790906_831550018.1705741361992 Content-Type: application/pkcs7-signature; name=smime.p7s; smime-type=signed-data Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCAMIIH JzCCBQ+gAwIBAgIUf0IEdxbxrlykPyMsRIzYx3Ki7hgwDQYJKoZIhvcNAQELBQAwUzELMAkGA1UE BhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEtMCsGA1UEAxMkU3dpc3NTaWduIFJTQSBTTUlN RSBMQ1AgSUNBIDIwMjEgLSAyMB4XDTIyMDQyOTA5MTQ0N1oXDTI1MDQyOTA5MTQ0N1owgYExCzAJ BgNVBAYTAkNIMR4wHAYDVQQKExVTd2lzc2NvbSAoU2Nod2VpeikgQUcxJzAlBgkqhkiG9w0BCQEW GHRob21hcy5ncmFmQHN3aXNzY29tLmNvbTEpMCcGA1UEAxMgU2VjdXJlIE1haWw6IEdhdGV3YXkg Q2VydGlmaWNhdGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPRE2Cfj5u5uwhJ3bX SlgQzVhEt9cteU6fHXisdtYktAJftbSyKkV5zmTFoB0T9tB1CYJE4oXl15LrJPN4ZQmAxhDgTm9e yRpl7n4oFIMq82lSWstrBtEivNFXaq5XwDm7oYee68W6Wy6Lb3wsZA1ZnqhLyAyHRaDXKR+ryiQC j/DRXgKnn3idwfztyIViWV2MtXlHAIWk0ukrdT/PVDZp98Ibk3RmLRn4ipmB60D2DefZZ3dZqwto lCOD/vZt8dzD9iOytI6oGCe/Up7LO1nkL1a+HNBfxq4xw8Rltkhoo/mMDEaa8NoG7Be88Y2ZdsaC teMgrF7UgNeW5zMF3tXnAgMBAAGjggLCMIICvjAjBgNVHREEHDAagRh0aG9tYXMuZ3JhZkBzd2lz c2NvbS5jb20wDgYDVR0PAQH/BAQDAgSwMBMGA1UdJQQMMAoGCCsGAQUFBwMEMB0GA1UdDgQWBBQ5 7Pt+7tVLhlzC8oNkhYSmlV5RqDAfBgNVHSMEGDAWgBT6VMCCpv6WvQTHX59fggw9w5VPRzCB/wYD VR0fBIH3MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNzc2lnbi5uZXQvRkE1NEMwODJBNkZFOTZC RDA0Qzc1RjlGNUY4MjBDM0RDMzk1NEY0NzCBqKCBpaCBooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dp c3NzaWduLm5ldC9DTj1GQTU0QzA4MkE2RkU5NkJEMDRDNzVGOUY1RjgyMEMzREMzOTU0RjQ3JTJD Tz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RD bGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDBnBgNVHSAEYDBeMFIGCGCFdAFZAgELMEYwRAYIKwYB BQUHAgEWOGh0dHBzOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfU01J TUUucGRmMAgGBgQAj3oBAzCBxgYIKwYBBQUHAQEEgbkwgbYwZAYIKwYBBQUHMAKGWGh0dHA6Ly9z d2lzc3NpZ24ubmV0L2NnaS1iaW4vYXV0aG9yaXR5L2Rvd25sb2FkL0ZBNTRDMDgyQTZGRTk2QkQw NEM3NUY5RjVGODIwQzNEQzM5NTRGNDcwTgYIKwYBBQUHMAGGQmh0dHA6Ly9vY3NwLnN3aXNzc2ln bi5uZXQvRkE1NEMwODJBNkZFOTZCRDA0Qzc1RjlGNUY4MjBDM0RDMzk1NEY0NzANBgkqhkiG9w0B AQsFAAOCAgEAdWATBHIjjMvkYo6JACCCGRXtY/8oRC4i9rFmPnsDlKt+axBs4rG5cclyNXhY6ir8 gDEL9ARZQUMkzOXvOLlbcLmLx37EKCxvym+ivju7ocb15LktSHnxxxQqOVRaCPEpJygaPEN6mlID sUzc2L8ucXQRs3TD+acgYHD4FXogO/7HOFj3geRuw4zRYJ252SuMU8zMFNpB1TiL0Kc7rebx9BFi jJ/tdphBQoKcvCp9DZreRyQ+CtfnQk7t//heitby2QHgC6por9ddzODcgkOcrLefJJiYOoUw5K5Z mKesp05e6OYDjbbo88OvDMoV3/gX/me1TpgoP92J9eIm3ifCdOgCSjrcjQV6n+02/g/CYefVX0Qy Mj+PtVf9UGFmVdORXmkQ4QA/T0a/egzotmtUe6+i7zCqp+CMXoW5OkbEC1JHWMK9tOfgWVVeVjg/ YgJz8jslc88+u57tzjFmnhSfUkRork9K67QtS5yih/+1V0opfbhELJ3KHWoVpCKVsFnf4tsuhV9o ozGFMDUK2uKJybPAxrJ0F9C8YStHdJSqicZxMKaPjh5HRybdVIiNzYHcZopQDOg8vuZwJx2JRP4m NC18Gyf4CX4a+jZ88LXV+8jFInhimAo/7yn4um0EIE+5Xzup+DgINyXBPpjtqvOHzaug+wCjbU8V rEKYKWwCY88wggdHMIIFL6ADAgECAg8sWqnZVP2yq5atF7ZfjPQwDQYJKoZIhvcNAQELBQAwUzEL MAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEtMCsGA1UEAxMkU3dpc3NTaWduIFJT QSBTTUlNRSBSb290IENBIDIwMjEgLSAxMB4XDTIxMDgwNDEyMTI1OVoXDTM2MDczMTEyMTI1OVow UzELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEtMCsGA1UEAxMkU3dpc3NTaWdu IFJTQSBTTUlNRSBMQ1AgSUNBIDIwMjEgLSAyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAvQUZyNQNcT4DAxC0kxYA688j2sAHI7tRPDgS00B1w3JjeOsLJ3lfjVaIqdl9WUPRiBd248dG i6vf4oiqPRLAnQjtQRDX3O9J4L8xUtaDnZn88poigGZVrBCUkKHMi5XQ1khdNyjfGu0YJd9DwyFE QbwVpaSDgsYggFICqIBmAb5u2UWWddAXIHxlP4GtfY5YRiPcUifaQj473FjySqYkmxvrNAkfzOHF 2kDzvWRBWMSJ+4OKzSGAWGcIbCI3D5+TrQvf+6f9xf9qigPYH7yvwskNeHz1Tj1SWjxArnzLOPrU YYdnnaRseIq0E2lVfOYlVN8Iz6YvOEyIFJUcKlFpaI9efAOa+6RlTHCPvkpcqt67nbt9fVo4gue5 AIpFR68gvoMAuElAGJ9Aql//3AKcfvfZ5i1gJlpxnXmkZhzCQpiX18tw44vEp1boIHF2xK55K+bJ rNZMqecIg0e2FSJHU7oiR6Rdne1mf3eRDk+ygXUv5Ou/14E61MJFsCkdlZv9NG9Gac9zeB4PRU6w T+dwNrnItnuy3970fIRSYo4btPMxrgpWOyoZ/tAQVOdGEjhNgZ2FrATnt+nXcNuO9HDP4hrTDGk1 5wNK4ODLF/Uz9L1+IkKVmTMKjcKnGJNHsDKsuEQwGO8R+BlzZERk9pyZ4FEW0EtcIEnBdTTM0Vvq 0a0CAwEAAaOCAhYwggISMA4GA1UdDwEB/wQEAwIBBjATBgNVHSUEDDAKBggrBgEFBQcDBDASBgNV HRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBT6VMCCpv6WvQTHX59fggw9w5VPRzAfBgNVHSMEGDAW gBQJDL8qoh0EJAyy+UAKQcLPWnKqgDCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3 aXNzc2lnbi5uZXQvMDkwQ0JGMkFBMjFEMDQyNDBDQjJGOTQwMEE0MUMyQ0Y1QTcyQUE4MDCBqKCB paCBooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj0wOTBDQkYyQUEyMUQwNDI0 MENCMkY5NDAwQTQxQzJDRjVBNzJBQTgwJTJDTz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRpZmljYXRl UmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDAfBgNV HSAEGDAWMAoGCGCFdAFZAgELMAgGBgQAj3oBAzB0BggrBgEFBQcBAQRoMGYwZAYIKwYBBQUHMAKG WGh0dHA6Ly9zd2lzc3NpZ24ubmV0L2NnaS1iaW4vYXV0aG9yaXR5L2Rvd25sb2FkLzA5MENCRjJB QTIxRDA0MjQwQ0IyRjk0MDBBNDFDMkNGNUE3MkFBODAwDQYJKoZIhvcNAQELBQADggIBAAcPHpcE hXoJluyBqRkzj8LTgtrc08AkIkQNlQvxFhinJJPANxfUPjNgPJVGFZUSibd9aQHs3F2j+jhVtNyD 4ol1O9EAOffJxqlMc845/K6RYWYAo+m4vDCXeTB+QtkUWBa4YkXn8eqaeNiy3NABSBdWapGmGtb8 9BIEzi/VxN4p13t/bcDy6Ht63P3/IH6Xpv7NTSCZNms8MsWZ9tumEq0nnb8YXuy4jeoDqr1O4caQ vG12oiGFcuwyEl8BLfdNhnPjOEG4VH/MkPj4it0HsRiForrDjuOnJ+u93Rv9Sgs5mv9S5afQ8Wnl B5cY43nnq/9lrVlmTRYaCJ68aXCufKHWiWUTGUCcDZYzG+uoBm+TqXmpzdLLvd/0vRq2YCajerKa de9Ws3zLkM1ao/YMRcuusiHZa4WXG2v0IsQtngCcZuXzPz2YPVl2e9+xvIwG7LqERB9W8bIJS88Q CMG6GO7lcCIpumXInim+mMuJ+k86XqzZoVOVB4lGUicyEP6rvQdeHH4dAgCaNfae30b8nhf6eyDQ x9HHk1U6ubBfJBbTDNW8/tP7FjkzanYvJBjuyO4qLgt/leAw8eBdbBnGooBV7VKS5qJeS7LPovTV xoFhXDxa3nsaC2gXXJAyYAZOszhylWMGXZ64NgqLyHr/7rpitFsgmu4sdfkg3LHdj18SMIIGizCC BHOgAwIBAgIQAN5MVSD23PQCGw8RVPeNEDANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJDSDEV MBMGA1UEChMMU3dpc3NTaWduIEFHMR8wHQYDVQQDExZTd2lzc1NpZ24gR29sZCBDQSAtIEcyMB4X DTIxMDgwMzEzMTQ1NVoXDTM2MTAyMzEzMTQ1NVowUzELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3 aXNzU2lnbiBBRzEtMCsGA1UEAxMkU3dpc3NTaWduIFJTQSBTTUlNRSBSb290IENBIDIwMjEgLSAx MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1rK4tDiPJro3yAEjRRZ+vmQ4hnJmYViN JIpZswyhKqt+u4V8ZWZwp+ki2+67MvqrsYY/q0iBuKvzKt03xy4L9qvfVa1UIBQ6t4lEbefoP66I IRiOR1aVAMnsZW5WRxRNrS4m0tSLbMrzMy358JuOt4YmgecLnosMfAWnPHr58IWQnIlnOXURsWOw 1CMsfdwfK3btBK26EckHSQ3jKA8uERTStrL/eLj+WlOAJKwLSLpOMjFR7Kr+u0QsC9f5fauN2myr CN3zQT2P9UFBXMbMUcoORB+3aoB2VWlR5kz9F4D7s1TusEodM5MGeblhEazkDluz3eCxJVy31NPN 9HueAVQrgpCh4cpDjfBBpBwHwNYzFqNFRo+ETGn9k1ed0+VvyyQMMS0DmMIAOUR5IoFt5Or8C2Qm bvzKnhoDRO1/TU3pEbJ2vYZ9e7tUP1GQR8eL+P9OLPIIMIwZwSxHNZ69q1OkIq6fDCEZKb2em8+E 3I7RNUsiEIEbYu3AS9MrkCJJHy0hrpHF3/HWQVRyDt7KNBD1yZqd1VwW5M0lsceocUas+FOFF4mr JBo4GDIkc+lVrviAYwNvhLDfoJS1qVPwi2r1VHnl/1ucom8i4f9AKWVsb45IaTE+gRs7i1j6Wy87 a31rJPC88o3lmuaseMvYgisAFx15agku1m52zzD721kCAwEAAaOCAWcwggFjMA8GA1UdEwEB/wQF MAMBAf8wHQYDVR0OBBYEFAkMvyqiHQQkDLL5QApBws9acqqAMB8GA1UdIwQYMBaAFFsle5akZVF+ uDnzwHhmXug65/DuMA4GA1UdDwEB/wQEAwIBBjCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRwOi8v Y3JsLnN3aXNzc2lnbi5uZXQvNUIyNTdCOTZBNDY1NTE3RUI4MzlGM0MwNzg2NjVFRTgzQUU3RjBF RTCBqKCBpaCBooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj01QjI1N0I5NkE0 NjU1MTdFQjgzOUYzQzA3ODY2NUVFODNBRTdGMEVFJTJDTz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRp ZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2lu dDANBgkqhkiG9w0BAQsFAAOCAgEAAvjqXdCKzKwIAzZUZv8KKYbhVIMsM+jHbK4QqVSBfyotiCat pqg0KA8ZBqmd4gKVBDJkTAvK+eN9wxNb6JdAjnfj44KBh60BYAfDxeEg/bcwlz66HHF0i19Np7H+ TnwJeHqHX/GsoSURl8csEZyQ6nIWPQI1qbvlI9gfUkC30I5d2iO8M+ky/bh1n0O+PVdLh2He7ZbI cHx+txPhCUC7GQIHD2vdH9LMDloSGOTBsZy+visRHuWaxeChNbHk4bJirsDobHyWh/pg3i2JHBRB QDmid++wFVsBPx7O5hSpnL6Cn7FiF98iQ7Uyb7cF/BjK2npDXWW1Jv5aQaFpdJfxQ1GN3H/ZV4Sn HVHygm2rDnzTo+XgyZUEbfLHnXfipfjIxblnBm9t/cZ/br7FatsENtswb129yJn+xHKWzLnLdIsk qRMLeLUGyvWLJhZzmB1xlZ3z8FLpbFV+BSIX0Ik8Ze1XgHf82Ky9s1OPB3tYE3qx58mw+OPJoZHi dM7KaBuyG8SWYJSQ2+UItz7MiH1nwFX8KHPeHDvazw8ctgjSMz75PJJIoFpwiB4QF5h6dt1gSD5y RT5wa4zrSHxZtVYFEhQKRk0CNgnRbHMhUifYa8TScqdMfts2ztM9y1zi7hvd+Tr9TRP/Ds5SthZx M6CXxV/2ghgXtTqbm7Z4qxvr/VowggW6MIIDoqADAgECAgkAu0AcQ/VeT7AwDQYJKoZIhvcNAQEF BQAwRTELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEfMB0GA1UEAxMWU3dpc3NT aWduIEdvbGQgQ0EgLSBHMjAeFw0wNjEwMjUwODMwMzVaFw0zNjEwMjUwODMwMzVaMEUxCzAJBgNV BAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2lnbiBHb2xkIENB IC0gRzIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCv5O5+iyQOEm6pUC0WRDuSklzK uF2EkkITKrxlV4JAPlckzVCLJSq3b/zvotDAHwIkShOWjyMT5ihYAKNHxwanhCMru72WK39VzIvB Vx8OYmUP3T1WinParn5tuoEcfkKMIDXZQ02E+oTbUizzDid3C2u/ES9yeJ8u2D7mGDdaKnL52mKQ kpXKH5zpszwry/MBE79az8G1CmC93bWZZFO4oJazb+Imd5GM4GIQAp80D6TVkjNR3r6NuoR6YDxq 258r7N7eAT9uTeVQhsu0r+1EQMXKWoza0it8qO6+puUKqg6l3wVSt1XHIl0yapeXYxPbydt5NnuF OkrFUon5JOedd6mC/1UcpXFpK9ECJPKzJtRr2gRV5cEKx20wN5Aq5J4UM14WF1XFW7XLNImS8Z0m j6EH1MayeFDbDAwLfAuMQde56d2MiPejTbIyzNgX2s23zmad1P1e/72XPil1536nYlivJTSlQcc9 vA1QygMDDwhaH5VzeGK/r3IUaQ6l5QMOeI4mKELwBwtiIBBnOUb6qQPMBDh6Zu8gg7WMSlaOkQD8 jlyC3oigw+Jobn2N7zzdZfRdrFHvJICuqlaXb/mtfdphP5h3PKWRthyMJtplogltweJU47nKTEyA j3d7YJoe37bySB4Ouk5UbZjg4aIaondQz8RjkuxHGZ3r5mvOwQIDAQABo4GsMIGpMA4GA1UdDwEB /wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbJXuWpGVRfrg588B4Zl7oOufw7jAf BgNVHSMEGDAWgBRbJXuWpGVRfrg588B4Zl7oOufw7jBGBgNVHSAEPzA9MDsGCWCFdAFZAQIBATAu MCwGCCsGAQUFBwIBFiBodHRwOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tLzANBgkqhkiG9w0B AQUFAAOCAgEAJ7rjlHzxrsDeF+bl2NX1VLCD9LvNXgV7T591Zq886FZ+/HJ4OAPZK2IbALn46WDN zM5RisdQMW7hSn4YL2lZtj1kgSvjg4TmIoeOfeDuAplhuB70uCuIEhaEwjGTOJYxprk7Uz/DJJNW W2mS7MXBuzgA4+wXqbjcx3wBg58yR7pSIjQdMnoJVqd8JTapPUvawIJvCrsSyIdLJxH5Hi3Hkz+e 218ma1LZLorxFMZEjRWpt7+93qYa7q4t+0h3F/677K8Y9SpR8DmEl5VsbhvDK8R0YHklsAon399e 0jnPRX1CS9+zLB7Fxl3KVTqgnGmaj9rvsrA8n4dsEitlcBVSMRokz28xI1AfjE+PI8N0QWMcVagU 3T7gUVDP8RswVg6SsIKF2IPLImS8Lbgl1VSiuAbqrZKkJKDBhrVKE2pHzy4LVpVUy86a22q0prLb QQiGJ3f3aqBCbAs4ztd1UDKSwt8rMCJI0NVBOCVdpOldn8aUddBF/TCXQ4+QqwrHhnNgSmkt3qV4 1wbaap5LPnc6IBMiAdC/aJ5jYGs1TQttuqE9wJPgfyOzVa1yJU5G+dIW77BkwQGe6cqgapgOz9hg 8i9JuORC4Tg1FvTIbk/3gVbouqO+I6+u/W8D4AI7MHb6G21BzwGx6bjJZvTbJvM6pHTySSRbybDQ V8H6Pnrhl8kAADGCA7IwggOuAgEBMGswUzELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2ln biBBRzEtMCsGA1UEAxMkU3dpc3NTaWduIFJTQSBTTUlNRSBMQ1AgSUNBIDIwMjEgLSAyAhR/QgR3 FvGuXKQ/IyxEjNjHcqLuGDANBglghkgBZQMEAgEFAKCCAhgwGAYJKoZIhvcNAQkDMQsGCSqGSIb3 DQEHATAcBgkqhkiG9w0BCQUxDxcNMjQwMTIwMDkwMjQyWjAtBgkqhkiG9w0BCTQxIDAeMA0GCWCG SAFlAwQCAQUAoQ0GCSqGSIb3DQEBCwUAMC8GCSqGSIb3DQEJBDEiBCA5d9a81NpPtWE9b6HX70ie JSCN7Wcpk3sMrT8K4WYoLTB6BgkrBgEEAYI3EAQxbTBrMFMxCzAJBgNVBAYTAkNIMRUwEwYDVQQK EwxTd2lzc1NpZ24gQUcxLTArBgNVBAMTJFN3aXNzU2lnbiBSU0EgU01JTUUgTENQIElDQSAyMDIx IC0gMgIUf0IEdxbxrlykPyMsRIzYx3Ki7hgwfAYLKoZIhvcNAQkQAgsxbaBrMFMxCzAJBgNVBAYT AkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxLTArBgNVBAMTJFN3aXNzU2lnbiBSU0EgU01JTUUg TENQIElDQSAyMDIxIC0gMgIUf0IEdxbxrlykPyMsRIzYx3Ki7hgwgYMGCSqGSIb3DQEJDzF2MHQw CwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwCwYJYIZI AWUDBAIDMAsGCWCGSAFlAwQCAjALBglghkgBZQMEAgEwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQC BzANBgkqhkiG9w0BAQsFAASCAQBSjy990tBa79PY6jbGvzeGl6wVVzKEY3bHefbZ9W7R+3yDimTA 8TtbwofgpLoKAAtKgPd6Ynty5cia23kDRkkhl5aPXKvvLqLvR4Q8+LwqOQd98sInr94piVX8pkJW NXR4LkS2y2y+mx2aqf6Z/Q4K7VnBtvM0GGsYRBnGbf70LUhKluT3esz5bvVZHGrkuilwVQ9buCSL JELpN5MGLWiOAl2Ric40MDCQTjOJZnBEXUGyck4iZlmmYrPvMgCw/hGWYsCGintxJelR27BUuTvO RxZAmUukgdkAuHDalIabgHiInN1u3dtYJax2/XKSOrpinH3xOtdrMpCywh4gPpLLAAAAAAAA ------=_Part_3790906_831550018.1705741361992--