356f12a876ed095a331f41dbfa237f167ef670e5634877f883713577bca384deaa5dc2da7c0ac393a8246457c785a3a154cc6755f07c2ff959f10925c16c02dd  sbom-1938-csaf-v2.2-0101.json