howsigned is a ruby gem utility to see how binaries contained in an .ipa are signed
The contained binary extensions used with the commands are defined here
https://rubygems.org/gems/howsigned
gem install howsigned
To print entitlements of all contained binaries in plist format keyed by application-identifier
howsigned entitlements test.ipa
To print all embedded provisioning profiles of contained binaries in plist format keyed by AppNameID
howsigned profiles test.ipa
To print expiration dates of all provisioning profiles in plist format keyed by AppNameID
howsigned profiles --expiration test.ipa
To check codesigning on all contained binaries
howsigned verify test.ipa
To compare entitlements and profiles between two .ipa files
howsigned compare testA.ipa testB.ipa