Inspect docker container image without starting it

docker create --name suspect-container suspect-image:version
docker export suspect-container | tar t > suspect-container-files.txt

These two commands result in a file containing a list of all files included in the container image.

You can also export the complete container into a tar file:

docker export suspect-container > test.tar