Information gathered from Ryan Hurst's blog. Bookmark it.
You need:
- cabextract
- perl with Convert::ASN1, JSON, Text::Iconv, and DateTime modules
Run ./getitall.sh to download the authrootstl.cab file (which contains all the Root Certificates trusted by Microsoft), and extract its content.
Script parsectl.pl does the real CTL parsing and outputs a JSON representation by default. If called with argument '-t', the output is basic text, all entries and attributes sorted (so that a diff between versions is possible).