notes on cosign generated keypair => signing and verifying with openssl cli - View it on GitHub