The bit you're missing is that you have to install your extension at least once in order to generate the key.
This: https://developer.chrome.com/apps/manifest/key documents the process for generating the key you need.
This: https://github.com/GoogleChrome/chrome-app-samples/blob/master/identity/manifest.json is an example of what your manifest.json will look like with a properly generated key.