signingCredential.untrusted
The signer does not chain to caller-supplied trust material.
This check failed.
What to do
Add the signer's certificate to your trust listC2PA Trust List: The list of signing authorities that conforming C2PA checkers trust by default., or confirm the signer out of band, before trusting the manifestC2PA manifest: The signed label itself: a small package inside a file that records who signed it, what they declared and how to check it..
What the signer trust cover
Whether the checker trusts the signer. The certificate chainCertificate chain: The links from a signer's certificate up to a root authority a checker already trusts. has to end at a source the checker trusts, and must not be revoked.
Check a file yourself
Install the open-source Encypher C2PAC2PA: The Coalition for Content Provenance and Authenticity: the group that publishes the open standard for content labels. command-line tool. It runs on your machine and reports these codes for any supported file format.
cargo install encypher-c2pa-cliCreate. Mark. Endure.
The Encypher APIAPI: Application programming interface: a way for one program to ask another to do a job, such as sign a file. returns these codes over HTTP, so your product can act on them.