claimSignature.validated
The active claim signatureClaim: The part of a C2PA manifest that lists every assertion by hash and is then signed, so no assertion can change unnoticed. is cryptographically valid.
This check passed.
What it means
The signed claim has not changed since it was signed. Whether you can trust who signed it is a separate check: signingCredential.trusted.
What the signature checks cover
Whether the claim signature still verifies, which shows the claim, the signed list of the C2PA manifestC2PA manifest: The signed label itself: a small package inside a file that records who signed it, what they declared and how to check it.'s parts, is unchanged since it was signed.
Check a file yourself
Install the open-source Encypher C2PAC2PA: The Coalition for Content Provenance and Authenticity: the group that publishes the open standard for content labels. command-line tool. It runs on your machine and reports these codes for any supported file format.
cargo install encypher-c2pa-cliCreate. Mark. Endure.
The Encypher APIAPI: Application programming interface: a way for one program to ask another to do a job, such as sign a file. returns these codes over HTTP, so your product can act on them.