A tool and related library to validate PGP keys derived from YubiKeys, and optionally compare the public keys to YubiKey attestation certificates.
Make sure to validate the attestation certificates prior to comparison. This can be done using yk-attest-verify.