The note representing an SBOM reference.
The format that SBOM takes. E.g. may be spdx, cyclonedx, etc...
The version of the format that the SBOM takes. E.g. if the format is spdx, the version may be 2.3.