Also it should be fedora, not redora . And /usr/share/doc/rpm-4.3.2 .
But why are we not told where to look for the gpg key when we get the error message? Surely this must baffle many people?
If yum knew where to get the key from, it could import the key itself.
However, yum doesn't only run on Fedora, and the places that other distros and repos put their keys can't possibly be known to yum unless the repo maintainers provide that information in a place where yum can find it (e.g. in the .repo file for each repo).
Paul.