yubico-piv-tool, but less functionality and more focused on ECDSA (including an explicit "sign" subcommand - like a YubiKey-based local KMS!) - View it on GitHub