[ilf@localhost ~]$ pkcs15-tool -D
Using reader with a card: OMNIKEY CardMan 6121 00 00
PKCS#15 Card [InfoNotary]:
	Version        : 0
	Serial number  :
	Manufacturer ID: Siemens AG (C)
	Flags          : Login required, PRN generation

PIN [PIN]
	Object Flags   : [0x3], private, modifiable
	Auth ID        : 02
	ID             : 01
	Flags          : [0x11], case-sensitive, initialized
	Length         : min_len:4, max_len:16, stored_len:0
	Pad char       : 0x00
	Reference      : 129 (0x81)
	Type           : UTF-8

PIN [SO-PIN]
	Object Flags   : [0x3], private, modifiable
	ID             : 02
	Flags          : [0x99], case-sensitive, unblock-disabled, initialized, soPin
	Length         : min_len:4, max_len:16, stored_len:0
	Pad char       : 0x00
	Reference      : 130 (0x82)
	Type           : UTF-8

PIN [Secondary Authentication PIN]
	Object Flags   : [0x3], private, modifiable
	Auth ID        : 02
	ID             : 03
	Flags          : [0x13], case-sensitive, local, initialized
	Length         : min_len:4, max_len:16, stored_len:0
	Pad char       : 0x00
	Reference      : 144 (0x90)
	Type           : UTF-8
	Path           : 3f005015

Private RSA Key [3819642D-C64E-4B54-8161-760FC3B5D5E6]
	Object Flags   : [0x3], private, modifiable
	Usage          : [0x26], decrypt, sign, unwrap
	Access Flags   : [0x1D], sensitive, alwaysSensitive, neverExtract, local
	ModLength      : 2048
	Key ref        : 1 (0x1)
	Native         : yes
	Path           : 3f00501550724b015501
	Auth ID        : 01
	ID             : efbe0c1ef2bb4ccb8b09998a6e13134d9e02d9d0
	GUID           : {f5c76c17-a1b1-8f4e-1ddf-0a6c5b07f8f3}

Private RSA Key [2539DE13-5BDF-46AD-892B-6FD8D4B570D7]
	Object Flags   : [0x3], private, modifiable
	Usage          : [0x26], decrypt, sign, unwrap
	Access Flags   : [0x1D], sensitive, alwaysSensitive, neverExtract, local
	ModLength      : 2048
	Key ref        : 2 (0x2)
	Native         : yes
	Path           : 3f00501550724b025502
	Auth ID        : 01
	ID             : 9728e9010f19a2526bd94ad5864689418cba74ee
	GUID           : {5f4e1aaa-7a97-2099-cefc-8df06ebbcbc0}

Private RSA Key [49833E70-E196-42EA-9AC4-2F929785A062]
	Object Flags   : [0x3], private, modifiable
	Usage          : [0x26], decrypt, sign, unwrap
	Access Flags   : [0x1D], sensitive, alwaysSensitive, neverExtract, local
	ModLength      : 2048
	Key ref        : 3 (0x3)
	Native         : yes
	Path           : 3f00501550724b035503
	Auth ID        : 01
	ID             : 15828a908305850c3af10687894c05a4411c590e
	GUID           : {a9c4cb90-43ff-f800-7372-91b41d0031d8}

Private RSA Key [F1CC681F-A2C4-4449-8904-DDB6EA39CCA6]
	Object Flags   : [0x3], private, modifiable
	Usage          : [0x26], decrypt, sign, unwrap
	Access Flags   : [0x1D], sensitive, alwaysSensitive, neverExtract, local
	ModLength      : 2048
	Key ref        : 4 (0x4)
	Native         : yes
	Path           : 3f00501550724b045504
	Auth ID        : 01
	ID             : 497d7e0b5c33e0bc58a0c8eff6ac99dc72fc461b
	GUID           : {7503abd4-dbf2-c415-b129-867241a71828}

Public RSA Key [3819642D-C64E-4B54-8161-760FC3B5D5E6]
	Object Flags   : [0x2], modifiable
	Usage          : [0x51], encrypt, wrap, verify
	Access Flags   : [0x10], local
	ModLength      : 2048
	Key ref        : -1 (0xFFFFFFFF)
	Native         : no
	Path           : 3f00501550754b01
	ID             : efbe0c1ef2bb4ccb8b09998a6e13134d9e02d9d0
	DirectValue    : <absent>

Public RSA Key [2539DE13-5BDF-46AD-892B-6FD8D4B570D7]
	Object Flags   : [0x2], modifiable
	Usage          : [0x51], encrypt, wrap, verify
	Access Flags   : [0x10], local
	ModLength      : 2048
	Key ref        : -1 (0xFFFFFFFF)
	Native         : no
	Path           : 3f00501550754b02
	ID             : 9728e9010f19a2526bd94ad5864689418cba74ee
	DirectValue    : <absent>

Public RSA Key [49833E70-E196-42EA-9AC4-2F929785A062]
	Object Flags   : [0x2], modifiable
	Usage          : [0x51], encrypt, wrap, verify
	Access Flags   : [0x10], local
	ModLength      : 2048
	Key ref        : -1 (0xFFFFFFFF)
	Native         : no
	Path           : 3f00501550754b03
	ID             : 15828a908305850c3af10687894c05a4411c590e
	DirectValue    : <absent>

Public RSA Key [F1CC681F-A2C4-4449-8904-DDB6EA39CCA6]
	Object Flags   : [0x2], modifiable
	Usage          : [0x51], encrypt, wrap, verify
	Access Flags   : [0x10], local
	ModLength      : 2048
	Key ref        : -1 (0xFFFFFFFF)
	Native         : no
	Path           : 3f00501550754b04
	ID             : 497d7e0b5c33e0bc58a0c8eff6ac99dc72fc461b
	DirectValue    : <absent>

X.509 Certificate [3819642D-C64E-4B54-8161-760FC3B5D5E6]
	Object Flags   : [0x2], modifiable
	Authority      : no
	Path           : 3f00501543044301
	ID             : efbe0c1ef2bb4ccb8b09998a6e13134d9e02d9d0
	GUID           : {f5c76c17-a1b1-8f4e-1ddf-0a6c5b07f8f3}

X.509 Certificate [49833E70-E196-42EA-9AC4-2F929785A062]
	Object Flags   : [0x2], modifiable
	Authority      : no
	Path           : 3f00501543044302
	ID             : 15828a908305850c3af10687894c05a4411c590e
	GUID           : {a9c4cb90-43ff-f800-7372-91b41d0031d8}
	Encoded serial : 02 09 00EB9DF17B26ECC220
X.509 Certificate [F1CC681F-A2C4-4449-8904-DDB6EA39CCA6]
	Object Flags   : [0x2], modifiable
	Authority      : no
	Path           : 3f00501543044303
	ID             : 497d7e0b5c33e0bc58a0c8eff6ac99dc72fc461b
	GUID           : {7503abd4-dbf2-c415-b129-867241a71828}
	Encoded serial : 02 09 00A29832FB1D1CC91C