...
reads the UK federation metadata aggregate from its distribution site
verifies the aggregate's signature using the X.509 certificate taken from
path/to/input/ukfederation-2014.pem
; , terminating processing if this is not possibleremoves three (imaginary) entities belonging to the
example.com
domainremoves all entity role descriptors other than
IDPSSODescriptor
,SPSSODescriptor
orAttributeAuthorityDescriptor
removes any person or organization contact information
writes the results into the file
path/to/output/output.xml
...