525b192c6920915a994847027315885502fc3605cf39c9b10588e65ea6b6174c  sbom-spdx.json