your looking in the wrong area what you need to do is decrypt the 3.60 auth (the one that goes threw charles) and get the passphrase and we have there ssl certificates (CA25.cer+CA27.cer). I just don't have any experience with ssl stuff but if it is encrypted with the ssl certificate then we should be able to decrypt it with the same certificate. but like i said i am not to experienced with that stuff. and what you did requires not decryption skills all you did was use a rco extractor which anyone can do.
Thats actually wrong, to encrypt and decrypt is not the same key used. If you have the certificate (encrypt key) you can bruteforce the passphrase. Would take a while though.
@All Im laughing at you all who repped him, just because he posted a picture of a xml. Obviously the passphrase is not in a .rco file. /facepalm
The following user thanked zxz0O0 for this useful post:
HAHAHAAH RCOs doesn't contain keys! if you really think that they contain something, just replace your 3.55 auth_plugins.rco with the 3.60.. (you can do that just because they aren't encrypted)