how to verify signature of blob?

[juju4]

how to verify signature of blob?

$ sudo cosign verify-blob --certificate-identity=https://github.com/open-telemetry/opentelemetry-collector-releases/.github/workflows/base-release.yaml@refs/tags/v0.125.0   --certificate-oidc-issuer=https://token.actions.githubusercontent.com /var/_install/otelcol-contrib_0.125.0_linux_armv7.tar.gz 
Error: provide a key with --key or --sk, a certificate to verify against with --certificate, or a bundle with --bundle
error during command execution: provide a key with --key or --sk, a certificate to verify against with --certificate, or a bundle with --bundle

$ sudo cosign verify-blob --certificate otelcol-contrib_0.125.0_linux_armv7.deb.pem --signature otelcol-contrib_0.125.0_linux_armv7.deb.sig --certificate-ident
ity=https://github.com/open-telemetry/opentelemetry-collector-releases/.github/workflows/base-release.yaml@refs/tags/v0.125.0   --certificate-oidc-issuer=https://token.actions.githubusercontent.com /var/_install/otelcol-contrib_0.125.0_linux_armv7.tar.gz 
Error: searching log query: [POST /api/v1/log/entries/retrieve][400] searchLogQueryBadRequest {"code":400,"message":"verifying signature: invalid signature when validating ASN.1 encoded signature"}
error during command execution: searching log query: [POST /api/v1/log/entries/retrieve][400] searchLogQueryBadRequest {"code":400,"message":"verifying signature: invalid signature when validating ASN.1 encoded signature"}

Or https://github.com/open-telemetry/opentelemetry-collector/blob/main/README.md#verifying-the-images-signatures is only for docker images?
Ref https://github.com/sigstore/cosign/blob/main/doc/cosign_verify-blob.md#examples
Thanks