Keep the colleague's microbu-esp32c5 tree in this repository

obu-firmware builds against vanetza-idf from microbu-esp32c5/external, but
that tree was gitignored, so a clone of this repository could not build the
firmware it ships. It is now committed here as ordinary files in its own
folder, microbu-esp32c5/: the colleague's commit cf4b99f plus the V2X2MAP
bridge's signature verification (--trust) used on the bench. Nothing is
fetched from or pushed to the colleague's repository; this repository and
its remotes carry everything. The folder's own .gitignore keeps build output,
downloaded components and private key material out, as it did there; the
committed file set is identical to that repository's tracked files.

The ESP32-C5 is still flashed from obu-firmware/, which only takes
vanetza-idf from microbu-esp32c5/, so the two stay separate folders.
FLASHING.md says how to take a newer version of the colleague's tree (copy
it over the folder, rebuild, test, commit).

microbu-esp32c5/pki/uml-l0-rca/rca/AFD566A8034ED5DB_0_Urban-Mobility-Lab-Root-CA_L0_2026-09-11.txt

@@ -0,0 +1,55 @@
+EU CCMS CPOC L0 ECTL — RCA descriptive information
+===================================================
+
+Full Company Name / RCA Operator:
+Hochschule für Angewandte Wissenschaften Hamburg (HAW Hamburg)
+Urban Mobility Lab
+
+RCA Name:
+Urban Mobility Lab L0 Root CA
+
+RCA Distribution Centre URL:
+https://cits-dc.uml-hamburg.de
+
+Contact:
+uml-haw@proton.me
+
+CertificateID:
+0_Urban-Mobility-Lab-Root-CA_L0
+
+Certificate HashedID8:
+AFD566A8034ED5DB
+
+CertificateID / acronym explanation:
+- 0: CPA-ID reserved for the L0 environment.
+- Urban-Mobility-Lab-Root-CA: Root CA operated for the Urban Mobility Lab at HAW Hamburg.
+- L0: EU CCMS L0 research/test environment.
+
+Purpose of testing:
+The RCA is used for research, field testing and proof-of-concept activities of the
+Urban Mobility Lab in the context of the micrOBU project. micrOBU investigates the
+integration of vulnerable road users into C-ITS through development of a lightweight,
+compact and low-cost VRU ITS-S using an MCU + mobile-phone architecture.
+
+Contextual constraints / deviations:
+- This is a new RCA and the first L0 submission for this RCA. No existing L0 entry is
+  intended to be replaced or revoked.
+- The implementation, including the C-ITS protocol stack, signing functionality and
+  VRU Awareness Basic Service, is under active development. Full implementation
+  conformity is not claimed.
+- The declared RCA Distribution Centre is the intended permanent DC URL. At the time
+  of this submission, the cits-dc.uml-hamburg.de subdomain and the required /getctl
+  and /getcrl endpoints are still being commissioned and are not yet operational.
+- The RCA intentionally includes ITS-AID 638 (VRU Awareness basic service) with
+  bitmap SSP range 01/FF for L0 VAM/VBS research. ITS-AID 638 is a standardized ETSI
+  ITS-AID but is not contained in the current CPOC Protocol Release 3.3 Table 4 list;
+  its inclusion is therefore an intentional L0 profile deviation.
+- The RCA private key is generated and maintained locally as an encrypted PKCS#8
+  NIST P-256 key for this L0 research environment. This software-based key storage is
+  not claimed to satisfy production/L2 cryptographic-module requirements.
+
+Re-key / revocation / relationship to existing certificates:
+New RCA / first submission. No existing L0 RCA certificate is affected.
+
+Submission date:
+2026-09-11

microbu-esp32c5/pki/uml-l0-rca/rca/UML_L0_RCA_public.pem

@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERRYsQMPF/6+MZf5Zg3hsnyMZR39W
+2i1rbusEm/7vDHX0OIzpTnfk2NZEGf/cRVLyrhOjtplgcqMzHdZ1bGr56A==
+-----END PUBLIC KEY-----

microbu-esp32c5/pki/uml-l0-rca/rca/certificate_report.json

@@ -0,0 +1,161 @@
+{
+  "id8": "AFD566A8034ED5DB",
+  "subject": {
+    "type": "hostname",
+    "hostname": "0_Urban-Mobility-Lab-Root-CA_L0"
+  },
+  "valid_from": "2026-09-14T23:58:51Z",
+  "valid_until": "2031-09-15T05:04:51Z",
+  "app_permissions": [
+    {
+      "type": "certificate_trust_list",
+      "tlm": false,
+      "root_ca": false,
+      "enrollment_authority": true,
+      "authorization_authority": true,
+      "distribution_centre": true
+    },
+    {
+      "type": "certificate_revocation_list"
+    }
+  ],
+  "cert_issue_permissions": [
+    {
+      "chain_length": {
+        "start": 2,
+        "end": 2
+      },
+      "end_entity_authorization": true,
+      "end_entity_enrollment": true,
+      "subject_permissions": {
+        "type": "explicit",
+        "permissions": [
+          {
+            "psid": "cam",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "01FFFF",
+              "subordinate_must_have": "FF0000"
+            }
+          },
+          {
+            "psid": "denm",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "02FFFFFFFF",
+              "subordinate_must_have": "FF00000000"
+            }
+          },
+          {
+            "psid": "tlm",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "01E0",
+              "subordinate_must_have": "FF1F"
+            }
+          },
+          {
+            "psid": "rlt",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "01C0",
+              "subordinate_must_have": "FF3F"
+            }
+          },
+          {
+            "psid": "ivim",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "01000000FFFF",
+              "subordinate_must_have": "FF0000000000"
+            }
+          },
+          {
+            "psid": "tlc_req",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "02FFFFE0",
+              "subordinate_must_have": "FF00001F"
+            }
+          },
+          {
+            "psid": "gm_mgmt",
+            "auth": {
+              "type": "all"
+            }
+          },
+          {
+            "psid": "cert_req",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "01C0",
+              "subordinate_must_have": "FF3F"
+            }
+          },
+          {
+            "psid": "tlc_stat",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "01",
+              "subordinate_must_have": "FF"
+            }
+          },
+          {
+            "psid": "vru",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "01",
+              "subordinate_must_have": "FF"
+            }
+          },
+          {
+            "psid": "cp",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "01",
+              "subordinate_must_have": "FF"
+            }
+          },
+          {
+            "psid": "poi",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "01",
+              "subordinate_must_have": "FF"
+            }
+          }
+        ]
+      }
+    },
+    {
+      "chain_length": {
+        "start": 1,
+        "end": 1
+      },
+      "end_entity_authorization": true,
+      "end_entity_enrollment": false,
+      "subject_permissions": {
+        "type": "explicit",
+        "permissions": [
+          {
+            "psid": "cert_req",
+            "auth": {
+              "type": "bitmap",
+              "subordinate_may_have": "013E",
+              "subordinate_must_have": "FFC1"
+            }
+          }
+        ]
+      }
+    }
+  ],
+  "cert_request_permissions": [],
+  "signature": {
+    "type": "self_signed",
+    "verifies": true
+  },
+  "public_key": {
+    "curve": "nistP256",
+    "k": "0245162C40C3C5FFAF8C65FE5983786C9F2319477F56DA2D6B6EEB049BFEEF0C75"
+  }
+}