Extract the package first. Select every extracted file, then select a separately obtained issuer JWKS. A key inside a package cannot establish trust.
Not run.