The location owner optionally publishes the location
Anyone who has the location can read just the headers or the full record
They can use any industry-standard third-party tools
You can compare this to the final "output" in the response from the write record command.
To find out whether the resultant fingerprint is valid, the user also needs the original record and the encoding method plus any salt used.