{"issuer":"ETP Foundry","purpose":"document-signing: reports (PDF) and exports (CSV)","keys":[{"keyId":"etpf-doc-9ff2019d01c4113b","status":"active","alg":"ES256","curve":"P-256","jwk":{"kty":"EC","crv":"P-256","x":"VkoXMWncaR4cEaxGM1j0mVlagIUCxpX9FrAFMRN-Fb4","y":"uoJiauWX_krl2hXc-FrTAvK2_hTWhKnVQ7ZsY2L7yTE"},"publicKeyPem":"-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEVkoXMWncaR4cEaxGM1j0mVlagIUC\nxpX9FrAFMRN+Fb66gmJq5Zf+SuXaFdz4WtMC8rb+FNaEqdVDtmxjYvvJMQ==\n-----END PUBLIC KEY-----\n","fingerprintSha256":"9ff2019d01c4113bcd10885193bf8c0d0f2b965042346e169dbfdd13d349895d","notBefore":"2026-09-27T00:00:00Z","notAfter":"2029-09-27T00:00:00Z","certificatePem":"-----BEGIN CERTIFICATE-----\nMIICBDCCAamgAwIBAgIRAJ/yAZ0BxBE7zRCIUZO/jA0wCgYIKoZIzj0EAwIwWDEl\nMCMGA1UEAwwcRVRQIEZvdW5kcnkgRG9jdW1lbnQgU2lnbmluZzEZMBcGA1UECwwQ\nSXNzdWVkIGRvY3VtZW50czEUMBIGA1UECgwLRVRQIEZvdW5kcnkwHhcNMjYwOTI3\nMDAwMDAwWhcNMjkwOTI3MDAwMDAwWjBYMSUwIwYDVQQDDBxFVFAgRm91bmRyeSBE\nb2N1bWVudCBTaWduaW5nMRkwFwYDVQQLDBBJc3N1ZWQgZG9jdW1lbnRzMRQwEgYD\nVQQKDAtFVFAgRm91bmRyeTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABFZKFzFp\n3GkeHBGsRjNY9JlZWoCFAsaV/RawBTETfhW+uoJiauWX/krl2hXc+FrTAvK2/hTW\nhKnVQ7ZsY2L7yTGjVDBSMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgbAMBMG\nA1UdJQQMMAoGCCsGAQUFBwMkMB0GA1UdDgQWBBSXDqV9TuZSXsY8XPLJrJlP6ycI\n/jAKBggqhkjOPQQDAgNJADBGAiEAj/XNKazmXahHVGzoXkWLCTkc0KeeP5FMU2V3\nVi31TLACIQDFCr2eN2TYfSKK3cCqxsONazn1k5wxnkRcEFVRJc5o+Q==\n-----END CERTIFICATE-----\n"}],"manifest":"A flat JSON object of string values; the signed bytes are its UTF-8 with keys sorted and no whitespace (what JSON.stringify gives over the keys in sorted order).","signature":"ECDSA P-256 with SHA-256 over those bytes, IEEE P1363 (r||s, 64 bytes), base64url.","pdfSignature":"Report PDFs also carry an embedded PAdES signature (ETSI.CAdES.detached) by the same key, with a self-signed certificate (certificatePem). PDF readers show the signer as not yet trusted until ETP Foundry holds a certificate from a publicly trusted document-signing CA.","verify":"https://etpfoundry.com/verify"}