JNUSTool can still do both of those things from CLI, but the syntax is a little confusing.
To download a specific version:
`java -jar JNUSTool.jar <TITLEID> <VERSION>`
Example:
`java -jar JNUSTool.jar 0005000010144F00 97`
If you omit the version, it downloads the latest version automatically.
To decrypt already downloaded encrypted contents:
`java -jar JNUSTool.jar <TITLEID> <TITLEKEY> -dlEncrypted -file /vol/content/`
or simply redownload decrypted:
`java -jar JNUSTool.jar <TITLEID> <TITLEKEY>`
JNUSTool normally decrypts automatically if you provide the correct title key.
Also:
* `-dlEncrypted` downloads encrypted contents only
* without it, contents are decrypted during download
* make sure your config file and Java version are correct or decryption can silently fail
If you already have encrypted files and only want to decrypt them locally afterward, most people nowadays use CDecrypt or FunKiiU workflows instead, because JNUSTool was mainly designed to decrypt during download rather than as a standalone offline decryptor.
One more thing: not every title version remains available on Nintendo's CDN forever, so if a specific version fails, the CDN may no longer host it.