tbt the time I wrote RPM GPG signature validation in bash

nothing better than bit-banging RPM header fields in it