Add support RFC 9589 (On the Use of the CMS Signing-Time Attribute in RPKI Signed Objects)

https://www.rfc-editor.org/info/rfc9589

Optimization; reduces the workload when falling back to rsync after an unsuccessful RRDP fetch.

Requires #82.