c0cb5f3d8cc5a11ac1ebec2f1c96a5f875e0faa3a3bce11f7e98437c40037ed34543004dd7be0ebd294f91b052921e99fe28b99139766d289d7e472d1982011e  sbom-1938-csaf-v2.2-0005.json