signingCredential.trusted
The signer chains to caller-supplied trust material.
This check passed.
What it means
The checker knows who signed. Their key leads back to a source it trusts.
What the signer trust cover
Whether the checker trusts the signer. The certificate chainCertificate chain: The links from a signer's certificate up to a root authority a checker already trusts. has to end at a source the checker trusts, and must not be revoked.
Check a file yourself
Install the open-source Encypher C2PAC2PA: The Coalition for Content Provenance and Authenticity: the group that publishes the open standard for content labels. command-line tool. It runs on your machine and reports these codes for any supported file format.
cargo install encypher-c2pa-cliCreate. Mark. Endure.
The Encypher APIAPI: Application programming interface: a way for one program to ask another to do a job, such as sign a file. returns these codes over HTTP, so your product can act on them.