Verify Blockchain Timestamps with Python and SHA-256

You get a file from a client who claims they created it last month. They show you a blockchain timestamp as proof. How do you verify that timestamp is legitimate without trusting their word? I built P