2 ms·

Strange that there is no public key provided... You can't verify a signature without a public key.

• sudosysgen 6y ago
  You can extract the public key from the signature. This public key is E2C73BC53B9118A0. If you want to have a go at it yourself, run gpg -vv and paste the entire message, it will give you the public key.
  • forgotmypw17 6y ago
    No, you cannot extract the public key from the signature. It is only telling you the fingerprint of the key the message claims to have been signed with, but there is no verification happening. You can change part of the message or the encoded fingerprint (which is a bit longer than the portion you pasted), and it will still report it the same way. However, you will not be able to mathematically verify that this message and another one was signed by the same key. If you look carefully at what GPG is telling you, probably see a line like this, unless you have the key in keyring: gpg: Can't check signature: No public key
    • sudosysgen 6y ago
      Yes, you're right, this is only the ID, you'd need to get the actual key off a keyserver.
      • forgotmypw17 6y ago
        Also, let us not forget the possibility that there may not even be a key to begin with. :)