print fingerprint to stderr not stdout