static X509ResourceCertificate createManifestEECertificate() {
   X509ResourceCertificateBuilder builder = new X509ResourceCertificateBuilder();
   builder
       .withCa(false)
       .withSubjectDN(ROOT_CERTIFICATE_NAME)
       .withIssuerDN(ROOT_CERTIFICATE_NAME)
       .withSerial(BigInteger.ONE);
   builder.withPublicKey(ROOT_KEY_PAIR.getPublic());
   builder.withSigningKeyPair(ROOT_KEY_PAIR);
   builder.withInheritedResourceTypes(EnumSet.allOf(IpResourceType.class));
   builder.withValidityPeriod(new ValidityPeriod(THIS_UPDATE_TIME, NEXT_UPDATE_TIME));
   return builder.build();
 }