tbt the time I wrote RPM GPG signature validation in bash
nothing better than bit-banging RPM header fields in it
@iliana mmm bit-banging.