Corporate PKI and GPG

Signing Key

curl https://raw.githubusercontent.com/freight-trust/pki/master/6F6EB43E.asc --output 6F6EB43E.asc

verify on keys.gnupgp

Docker Trust Signature

freight-trust key with ID: fbda181

-----BEGIN PUBLIC KEY-----
role: freight-trust

MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEXRTPyINRxXaIs+tXqGv99Fnm83Jy
DR8xgYoRFTzTMF4V13jx43Fn9nFJLfmdqyFovngiedFIm9htFve9qToAZg==
-----END PUBLIC KEY-----

PGP

Public Key Infrastructure and other Cryptographic Signing Instruments

pub   rsa4096 2020-06-04 [SC] [expires: 2024-06-04]
      858023A92C8DA82FB996BB37361D5A506F6EB43E
uid           [ultimate] sam bacha <sam@freighttrust.com>
uid           [ultimate] Freight Trust Corp <sam@freighttrust.com>
sub   rsa4096 2020-06-04 [E] [expires: 2024-06-04]
sub   rsa4096 2020-06-16 [S] [expires: 2022-08-29]'

      8580 23A9 2C8D A82F B996  BB37 361D 5A50 6F6E B43E

Corporate

PGP KEY: 2E2505DA71A9E336C437145237793083039CCF9D

corporate@freighttrust.com.

The playbook and instructions are located in Freight Trust & Clearing Corporation.

Usage

Example

$ gpg --verify besu-xt.asc
gpg: assuming signed data in 'besu-xt'
gpg: Signature made Thu Jun 25 07:01:55 2020 PDT
gpg:                using RSA key C00B2090F23C5629029111CBF5D2A7216C51FB94
gpg: Good signature from "sam bacha <sam@freighttrust.com>" [ultimate]
gpg:                 aka "Freight Trust Corp <sam@freighttrust.com>" [ultimate]

Where https://github.com/freight-trust/pki/gpg/6F6EB43E.asc is = C00B2090F23C5629029111CBF5D2A7216C51FB94

Resources

• Freight Trust Network Project

• Freight Trust Docs

• Freight Trust & Clearing Repositories

• Sequoia PGP

Copyright and License

Copyright © 2020 FreightTrust & Clearing Corporation. and individual Freight Trust Network Project contributors.

Use of this documentation is granted under a dual-license, MIT and Apache-2.0

License

MIT Apache-2.0

Development of the Freight Trust Network is led and sponsored by FreightTrust & Clearing Corporation.