Kerberos Ticket Inspection and Renewal

Inspect a Kerberos credentials cache to identify principals, service names, ticket flags, validity, and encryption types. The Impacket ticket describer can also parse encrypted ticket or PAC data when the appropriate service key is available. Optionally request renewal of an eligible TGT with kinit -R before its end time; renewal contacts the realm KDC and is bounded by the ticket's renew-till value and KDC policy. Cache inspection is local; this procedure alone does not authenticate to a target service.