5991c317ef91b1765b978c28048f5123c27edf6518b9afcf1f2b36cc26e385139b60a859c51ea139eece338227573e139ed251ab8a55f5c04461948de5434fa7  sbom-2912-csaf-v2.2-1991.json