As of CR1 and CR2 artifacts
org.eclipse.microprofile.openapi:microprofile-openapi-api and
org.eclipse.microprofile.openapi:microprofile-openapi-parent has 2.0.1.RC1-redhat-00001, which contains prohibited line RC1.

Wrong versions in CR3:
org.apache.geronimo.specs:geronimo-jms_2.0_spec:1.0.0.alpha-2-redhat-2 — "alpha" is not allowed
org.eclipse.microprofile.openapi:microprofile-openapi-api and
org.eclipse.microprofile.openapi:microprofile-openapi-parent has 2.0.1.RC1-redhat-00001, which contains prohibited line RC1.
Artifacts with wrong redhat suffixes
org.jboss.spec.javax.transaction:jboss-transaction-api_1.2_spec:1.1.1.Final-redhat-1 — should be redhat-00001
org.jboss.weld:weld-parent:36.0.0.redhat-1
org.apache.commons:commons-parent:37.0.0.redhat-4
org.apache.commons:commons-parent:39.0.0.redhat-2 — Also, it looks like a duplicate
com.googlecode.json-simple:json-simple:1.1.1.redhat-1
javax.activation:activation:1.1.1.redhat-5
javax.enterprise:cdi-api:2.0.0.redhat-1
commons-collections:commons-collections:3.2.2.redhat-2
commons-lang:commons-lang:2.6.0.redhat-7
commons-pool:commons-pool:1.6.0.redhat-10