NAME
    gcloud alpha kms keys versions get-public-key - get the public key for a
        given version

SYNOPSIS
    gcloud alpha kms keys versions get-public-key VERSION [--key=KEY]
        [--keyring=KEYRING] [--location=LOCATION] [--output-file=OUTPUT_FILE]
        [--public-key-format=PUBLIC_KEY_FORMAT] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    (ALPHA) Returns the public key of the given asymmetric key version in the
    specified format.

    The optional flag output-file indicates the path to store the public key.
    If not specified, the public key will be printed to stdout.

    The optional flag public-key-format indicates the format in which the
    public key will be returned. For the NIST PQC algorithms, this must be
    specified and set to nist-pqc. For kem-xwing this must be specified and set
    to xwing-raw-bytes. For all other algorithms, this flag is optional and can
    be either pem or der; the default value is pem. See "Retrieve a public key"
    in the Cloud KMS documentation
    (https://cloud.google.com/kms/help/get-public-key) for more information
    about the supported formats.

EXAMPLES
    The following command saves the public key for CryptoKey frodo Version 2 to
    '/tmp/my/public_key.file':

        $ gcloud alpha kms keys versions get-public-key 2 --key=frodo \
            --keyring=fellowship --location=us-east1 \
            --public-key-format=pem --output-file=/tmp/my/public_key.file

POSITIONAL ARGUMENTS
     VERSION
        Name of the version to get public key.

FLAGS
     --key=KEY
        The containing key.

     --keyring=KEYRING
        Key ring of the key.

     --location=LOCATION
        Location of the keyring.

     --output-file=OUTPUT_FILE
        Path to the output file to store public key.

     --public-key-format=PUBLIC_KEY_FORMAT
        The format in which the public key will be returned.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
    access allowlist. These variants are also available:

        $ gcloud kms keys versions get-public-key

        $ gcloud beta kms keys versions get-public-key

