I can understand why we were still using hactool in, say, 2018, but it's now 2022.
This whole process is very messy going through lots of extra steps and using command line stuff I can't even remember (and I am actually good with the command line) so I had to make batch files just to do it for me so I wouldn't forget. tik file seems to not be working for me for whatever reason (it says it failed to read the RomFS directory cache) so at this point I struggle to extract most newer stuff. Trying to extract by getting the title keys manually via the. Unfortunately, NSCB hasn't been updated in a while and no longer is able to update its titlekeys database, so it's time to move on I guess.
However, it seems to not have been updated in ages and I'm having more and more troubles with it (and weirdness like it saying prod.keys does not exist when it does and it then proceeds to complain about the lines in prod.keys it doesn't like that supposedly it was going to stop warning about in future versions.) Dealing with the titlekey was always a problem and the best suggestion I ever got was to repack the file using NSCBuilder (which is obviously a messy and tedious process that doubles storage requirements) since that would remove the crypto - or it used to.