NewVerifier checks the validity of the signatures in sigs at verificationTime, and returns a Verifier that can be used to verify responses in the bundle.

SignedSubset represents a "signed-subset" structure.