$ gpg --keyserver hkp://keyserver.ubuntu.com --recv-key DF00FAF1C577104B50BF1D0093D6889F9F0E78D5
gpg: key 93D6889F9F0E78D5: 1 duplicate signature removed
gpg: key 93D6889F9F0E78D5: public key "Igor Pecovnik <igor@armbian.com>" imported
gpg: Total number processed: 1
gpg: imported: 1
graeme@NUC:/net/nas/Public/Reference/Computer/OrangePi$ ls
Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz
Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz.asc
Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz.sha
$ gpg --verify Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz.asc
gpg: assuming signed data in 'Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz'
gpg: Signature made Thu 25 Apr 2024 04:38:28 BST
gpg: using RSA key DF00FAF1C577104B50BF1D0093D6889F9F0E78D5
gpg: Good signature from "Igor Pecovnik <igor@armbian.com>" [unknown]
gpg: aka "Igor Pecovnik (Ljubljana, Slovenia) <igor.pecovnik@gmail.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: DF00 FAF1 C577 104B 50BF 1D00 93D6 889F 9F0E 78D5
$ shasum -a 256 -c Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz.sha
shasum: /armbian/.tmp/image-no-uuidgen-yet-16025-5236/Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz: No such file or directory
/armbian/.tmp/image-no-uuidgen-yet-16025-5236/Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz: FAILED open or read
shasum: WARNING: 1 listed file could not be read
$ cat Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz.sha
d24cca1638c0c0573034676ea83fb205c2b46725db3e889f04907b659713c251 */armbian/.tmp/image-no-uuidgen-yet-16025-5236/Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz
$ shasum -a 256 -c Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz.sha
shasum: /armbian/.tmp/image-no-uuidgen-yet-16025-5236/Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz: No such file or directory
/armbian/.tmp/image-no-uuidgen-yet-16025-5236/Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz: FAILED open or read
shasum: WARNING: 1 listed file could not be read
$ cat Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz.sha
d24cca1638c0c0573034676ea83fb205c2b46725db3e889f04907b659713c251 */armbian/.tmp/image-no-uuidgen-yet-16025-5236/Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz
$ shasum -a 256 Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz > my-version.sha
$ shasum -a 256 -c my-version.sha
Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz: OK
$ cat my-version.sha
d24cca1638c0c0573034676ea83fb205c2b46725db3e889f04907b659713c251 Armbian_community_24.5.0-trunk.474_Orangepi4_bookworm_current_6.6.28_minimal.img.xz
$
Finding doing formatting difficult here (which is why this at the foot)
Following the "getting started guide , doing the checks ....looks like the process wasn't recently tested? ...Anyhow I believe the images are fine, just looks like build process generates a .asc and the key file has some issues.
