more validation of manifest.json in .obz files