I read that. He doesn't give the message that is signed (just the digest and a screen shot of a small portion of the file). Without the actual data, this can't be verified.