In a normal, long-lived TUF PKI, 1.root.json expires and a new 2.root.json is generated that is self-signed and signed by keys in 1.root.json. To allow for upgrading into the new root, 1.root.json is also shipped with the repo.
Write a test with this scenario to ensure we can ship a repository with both a 1.root.json and 2.root.json.
In a normal, long-lived TUF PKI, 1.root.json expires and a new 2.root.json is generated that is self-signed and signed by keys in 1.root.json. To allow for upgrading into the new root, 1.root.json is also shipped with the repo.
Write a test with this scenario to ensure we can ship a repository with both a 1.root.json and 2.root.json.