Changes since SOA version
IXFR is a zone transfer request that returns changes since a specific SOA version. Enter the SOA version to request changes since then.
Not an apex domain
The domain 5834933a-cd44-46bd-8ef6-35dc6153915c.2.authorize.certificatemanager.goog is not the root of its zone.
Instead, try zone transfer on 2.authorize.certificatemanager.goog .
Instead, try zone transfer on 2.authorize.certificatemanager.goog .