Signing Key

curl https://raw.githubusercontent.com/freight-trust/pki/update/asc/6F6EB43E.asc --output 6F6EB43E.asc

verify on keys.gnupgp

Docker Trust Signature

freight-trust key with ID: fbda181

-----BEGIN PUBLIC KEY-----
role: freight-trust

MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEXRTPyINRxXaIs+tXqGv99Fnm83Jy
DR8xgYoRFTzTMF4V13jx43Fn9nFJLfmdqyFovngiedFIm9htFve9qToAZg==
-----END PUBLIC KEY-----

PGP

Public Key Infrastructure and other Cryptographic Signing Instruments

pub   rsa4096 2020-06-04 [SC] [expires: 2024-06-04]
      858023A92C8DA82FB996BB37361D5A506F6EB43E
uid           [ultimate] sam bacha <sam@freighttrust.com>
uid           [ultimate] Freight Trust Corp <sam@freighttrust.com>
sub   rsa4096 2020-06-04 [E] [expires: 2024-06-04]
sub   rsa4096 2020-06-16 [S] [expires: 2022-08-29]'

      8580 23A9 2C8D A82F B996  BB37 361D 5A50 6F6E B43E

The playbook and instructions are located in {url-site-readme}[Freight Trust & Clearing Corporation].

Usage

Example

$ gpg --verify besu-xt.asc
gpg: assuming signed data in 'besu-xt'
gpg: Signature made Thu Jun 25 07:01:55 2020 PDT
gpg:                using RSA key C00B2090F23C5629029111CBF5D2A7216C51FB94
gpg: Good signature from "sam bacha <sam@freighttrust.com>" [ultimate]
gpg:                 aka "Freight Trust Corp <sam@freighttrust.com>" [ultimate]

Public Key is = C00B2090F23C5629029111CBF5D2A7216C51FB94