systemd-analyze critical-chain
The time after the unit is active or started is printed after the "@" character.
The time the unit takes to start is printed after the "+" character.

graphical.target @1min 43.003s
└─multi-user.target @1min 43.003s
  └─kerneloops.service @1min 42.994s +8ms
    └─network-online.target @1min 42.993s
      └─NetworkManager-wait-online.service @1min 35.007s +7.986s
        └─NetworkManager.service @1min 32.271s +2.733s
          └─dbus.service @1min 32.082s
            └─basic.target @1min 32.065s
              └─sockets.target @1min 32.065s
                └─avahi-daemon.socket @1min 32.065s
                  └─sysinit.target @1min 32.000s
                    └─cryptsetup.target @17.414s
                      └─systemd-ask-password-wall.path @1.723s
                        └─-.mount @1.697s
                          └─system.slice @1.723s
                            └─-.slice @1.697s