Reference

pgpainless-cli-extract-cert(1) on Linux

The text cdbf1321078d, as Debian 12 (Bookworm) shipped it.

Extract a public key certificate from a secret key from standard input

Flags it lists

pgpainless-cli-extract-cert(1) on Linux now