keytool -genkeypair -alias punch-jwt -validity 365 -keyalg RSA -dname "CN=punch,OU=xxx,O=yyy,L=cd,S=sc,C=CH" -keypass w51D6TxR -keystore punch-jwt.jks -storepass w51D6TxR

keytool -list -rfc --keystore punch-jwt.jks | openssl x509 -inform pem -pubkey