pub fn verify_revocations(
signed_bytes: &[u8],
signature: &[u8],
trusted_keys: &[TrustedPubkey],
now: DateTime<Utc>,
freshness_window: Duration,
reject_before: Option<DateTime<Utc>>,
) -> Result<Verified<Revocations>, VerifyError>