The location owner optionally publishes the link location
Anyone who has the location can read just the headers or the full record
They can use any industry-standard tool
To find out whether the resultant fingerprint is valid, the user also needs the original record and the encoding method plus any salt used.