Using the URL returned by Charles Proxy when installing an extension from the Chrome Web Store to download the extension (inspired by paulirish).
$ extension_id=jifpbeccnghkjeaalbbjmodiffmgedin
$ curl --output "$extension_id.crx" --silent --location "https://clients2.google.com/service/update2/crx?response=redirect&os=mac&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=canary&prodversion=107.0.5304.0&lang=en-GB&acceptformat=crx3&x=id%3D$extension_id%26installsource%3Dondemand%26uc"
$ file "$extension_id.crx"
jifpbeccnghkjeaalbbjmodiffmgedin.crx: Google Chrome extension, version 3
The SHA-256 checksum of the downloaded file matches the value returned by the API.
$ sha256sum "$extension_id.crx"