Package: appstream-util (0.8.2-1) Utility to work with AppStream metadata Other Packages Related to appstream-util: dep: [libappstream-glib8 ] (>= 0.8.0)
GNOME library to access AppStream services
dep: [libc6 ] (>= 2.34)
GNU C Library: Shared libraries
dep: [libcurl3-gnutls ] (>= 7.16.2)
libreria facile da usare per il trasferimento di URL lato client (variante GnuTLS)
dep: [libgdk-pixbuf-2.0-0 ] (>= 2.22.0)
Libreria GDK Pixbuf
dep: [libglib2.0-0 ] (>= 2.30.0)
GLib library of C routines
Percorsi file del pacchetto (41) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/appstream-compose /usr/bin/appstream-util /usr/share/aclocal/appdata-xml.m4 /usr/share/aclocal/appstream-xml.m4 /usr/share/bash-completion/completions/appstream-util /usr/share/doc/appstream-util/changelog.Debian.gz /usr/share/doc/appstream-util/copyright /usr/share/locale/ca/LC_MESSAGES/appstream-glib.mo /usr/share/locale/cs/LC_MESSAGES/appstream-glib.mo /usr/share/locale/da/LC_MESSAGES/appstream-glib.mo /usr/share/locale/de/LC_MESSAGES/appstream-glib.mo /usr/share/locale/en_GB/LC_MESSAGES/appstream-glib.mo /usr/share/locale/es/LC_MESSAGES/appstream-glib.mo /usr/share/locale/fa/LC_MESSAGES/appstream-glib.mo /usr/share/locale/fi/LC_MESSAGES/appstream-glib.mo /usr/share/locale/fr/LC_MESSAGES/appstream-glib.mo /usr/share/locale/fur/LC_MESSAGES/appstream-glib.mo /usr/share/locale/gl/LC_MESSAGES/appstream-glib.mo /usr/share/locale/hr/LC_MESSAGES/appstream-glib.mo /usr/share/locale/hu/LC_MESSAGES/appstream-glib.mo /usr/share/locale/id/LC_MESSAGES/appstream-glib.mo /usr/share/locale/it/LC_MESSAGES/appstream-glib.mo /usr/share/locale/ka/LC_MESSAGES/appstream-glib.mo /usr/share/locale/ko/LC_MESSAGES/appstream-glib.mo /usr/share/locale/lt/LC_MESSAGES/appstream-glib.mo /usr/share/locale/oc/LC_MESSAGES/appstream-glib.mo /usr/share/locale/pl/LC_MESSAGES/appstream-glib.mo /usr/share/locale/pt_BR/LC_MESSAGES/appstream-glib.mo /usr/share/locale/pt/LC_MESSAGES/appstream-glib.mo /usr/share/locale/ru/LC_MESSAGES/appstream-glib.mo /usr/share/locale/sk/LC_MESSAGES/appstream-glib.mo /usr/share/locale/sl/LC_MESSAGES/appstream-glib.mo /usr/share/locale/sr@latin/LC_MESSAGES/appstream-glib.mo /usr/share/locale/sr/LC_MESSAGES/appstream-glib.mo /usr/share/locale/sv/LC_MESSAGES/appstream-glib.mo /usr/share/locale/tr/LC_MESSAGES/appstream-glib.mo /usr/share/locale/uk/LC_MESSAGES/appstream-glib.mo /usr/share/locale/zh_CN/LC_MESSAGES/appstream-glib.mo /usr/share/locale/zh_TW/LC_MESSAGES/appstream-glib.mo /usr/share/man/man1/appstream-compose.1.gz /usr/share/man/man1/appstream-util.1.gz Field source: Debian 12 (Bookworm) main amd64 revision bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Usa questo pacchetto OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.
Versioni, suite e repository Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.
Checksum e date di osservazione For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.
0.8.2-1 / amd64 Observed Sep 1, 2026 to Sep 1, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: 85b6f933aab0c9440431e7de18f0863c8b05bb0335239849ef54044dbfe96f0d
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' '85b6f933aab0c9440431e7de18f0863c8b05bb0335239849ef54044dbfe96f0d' 'appstream-util_0.8.2-1_amd64.deb' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Debian 12 (Bookworm) main amd64 revision bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
0.8.2-1 / arm64 Observed Sep 1, 2026 to Sep 1, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: 3c45bf37b18da65e65efb22a956bd3bc031818be71f103a9123da4ccc35af4aa
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' '3c45bf37b18da65e65efb22a956bd3bc031818be71f103a9123da4ccc35af4aa' 'appstream-util_0.8.2-1_arm64.deb' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Debian 12 (Bookworm) main arm64 revision bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Fonti e provenienza Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.
Authoritative source; repository metadata signature verified, revision bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed-object SHA-256 77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint 4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision debian-archive-keyring.gpgSHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy gpgv (GnuPG) 2.4.9 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Signed Release → package-index hash linkage Path: main/binary-amd64/Packages.xz Expected SHA-256: 9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5 Observed SHA-256: 9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5 Result: match verified
Authoritative source; repository metadata signature verified, revision bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed-object SHA-256 77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint 4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision debian-archive-keyring.gpgSHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy gpgv (GnuPG) 2.4.9 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Signed Release → package-index hash linkage Path: main/binary-arm64/Packages.xz Expected SHA-256: 2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00 Observed SHA-256: 2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00 Result: match verified