Also here: [FAQ] Issues with “signature is marginal trust”, "signature is unknown trust", or “invalid or corrupted package”